CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- purethemes listeo coreWordPress Listeo-Core Plugin < 2.0.7 - SQL Injection Vulnerability8.5 High
- scriptsbundle exertio frameworkWordPress Exertio Framework Plugin <= 1.3.3 - SQL Injection Vulnerability8.5 High
- kamleshyadav miraculous core pluginWordPress Miraculous Core Plugin Plugin <= 2.0.7 - Privilege Escalation Vulnerability9.8 Critical
- add-ons.org drag and drop file upload for elementor formsWordPress Drag and Drop File Upload for Elementor Forms Plugin <= 1.5.3 - Arbitrary File Upload Vulnerability10.0 Critical
- cocobasic neresaWordPress Neresa Theme <= 1.3 - Local File Inclusion Vulnerability8.1 High
- imaprogrammer custom commentWordPress Custom Comment plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- venca-x rajceWordPress rajce plugin <= 0.4.2 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- metin saraç popup for cf7 with sweet alertWordPress Popup for CF7 with Sweet Alert plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- saeed sattar beglou hesabfa accountingWordPress Hesabfa Accounting plugin <= 2.2.5 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- saeed sattar beglou hesabfa accountingWordPress Hesabfa Accounting plugin <= 2.2.5 - Sensitive Data Exposure via Log File vulnerability5.3 Medium
- razvan stanga varnish/nginx proxy cachingWordPress Varnish/Nginx Proxy Caching plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- thaihavnn07 att youtube widgetWordPress ATT YouTube Widget plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- everythingwp risk free cash on delivery (cod) – woocommerceWordPress Risk Free Cash On Delivery (COD) – WooCommerce plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- theme century century toolkitWordPress Century ToolKit plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) to Arbitrary Plugin Activation vulnerability5.4 Medium
- isra kanpressWordPress Kanpress plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wp smart widgets better post & filter widgets for elementorWordPress Better Post & Filter Widgets for Elementor plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- dactum clickbank wordpress plugin (niche storefront)WordPress Clickbank WordPress Plugin (Niche Storefront) plugin <= 1.3.5 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- sitesearch-yandex yandex site search pingerWordPress Yandex Site search pinger plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- pluginspoint kento splash screenWordPress Kento Splash Screen plugin <= 1.4 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- basar ventures autowpWordPress AutoWP plugin <= 2.2.7 - Broken Access Control vulnerability4.3 Medium
- origincode video gallery – vimeo and youtube galleryWordPress Video Gallery – Vimeo and YouTube Gallery plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- chandrashekharsahu site offlineWordPress Site Offline plugin <= 1.5.7 - Broken Access Control vulnerability4.3 Medium
- vincent mimoun-prat bxslider integration for wordpressWordPress bxSlider integration for WordPress plugin <= 1.7.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- aaron axelsen wpmu ldap authenticationWordPress WPMU Ldap Authentication plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- inkthemes wp mailgun smtpWordPress WP Mailgun SMTP plugin <= 1.0.7 - Broken Access Control vulnerability5.3 Medium
- shmish111 wp admin themeWordPress WP Admin Theme plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- khashabawy tli.tl auto twitter posterWordPress tli.tl auto Twitter poster plugin <= 3.4 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- md abunaser khan advance food menuWordPress Advance Food Menu plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- finn dohrn statify widgetWordPress Statify Widget plugin <= 1.4.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- dyiosah ultimate twitter profile widgetWordPress Ultimate twitter profile widget plugin <= 1.0 - CSRF to Stored XSS vulnerability7.1 High
- cuckoohello 百度分享按钮WordPress 百度分享按钮 plugin <= 1.0.6 - CSRF to Stored XSS vulnerability7.1 High
- gslauraspeck mesa mesa reservation widgetWordPress Mesa Mesa Reservation Widget plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- shen2 多说社会化评论框WordPress 多说社会化评论框 plugin <= 1.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability4.3 Medium
- itayxd responsive mobile-friendly tooltipWordPress Responsive Mobile-Friendly Tooltip plugin <= 1.6.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- stanton119 wordpress htmlWordPress WordPress HTML plugin <= 0.51 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- salubrio add code to headWordPress Add Code To Head plugin <= 1.17 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- kevin heath tripadvisor shortcodeWordPress Tripadvisor Shortcode plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- 文派翻译（wp chinese translation） wpavatarWordPress WPAvatar plugin <= 1.9.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- offclicks invisible optinWordPress Invisible Optin plugin <= 1.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- wptableeditor table editorWordPress Table Editor plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- web-able betpressWordPress BetPress plugin <= 1.0.1 Lite - CSRF to Stored XSS vulnerability7.1 High
- nonletter newsletter subscription optin moduleWordPress Newsletter subscription optin module plugin <= 1.2.9 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- kasonzhao seo for imagesWordPress SEO For Images plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- developers savyour savyour affiliate partnerWordPress Savyour Affiliate Partner plugin <= 2.1.4 - CSRF to Stored XSS vulnerability7.1 High
- vikingjs goal tracker for patreonWordPress Goal Tracker for Patreon plugin <= 0.4.6 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- gary illyes google xml news sitemap pluginWordPress Google XML News Sitemap plugin plugin <= 0.02 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability7.1 High
- mibuthu link viewWordPress Link View plugin <= 0.8.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- xavier media xm-backupWordPress XM-Backup plugin <= 0.9.1 - CSRF to Stored XSS vulnerability7.1 High
- extremeidea bidorbuy store integratorWordPress bidorbuy Store Integrator plugin <= 2.12.0 - Remote Code Execution (RCE) vulnerability9.1 Critical
- wbw woobewoo product filter proWordPress WooBeWoo Product Filter Pro plugin < 2.9.6 - SQL Injection vulnerability9.3 Critical
- Show moreLoading…