CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- usamafarooq woocommerce gifts productWordPress Woocommerce Gifts Product Plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) Vulnerability6.5 Medium
- ali aghdam aparat video shortcodeWordPress Aparat Video Shortcode Plugin <= 0.2.4 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- sudar muthu wp github gistWordPress WP Github Gist Plugin <= 0.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- josepsitjar storymapWordPress StoryMap Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- pusheco pushe web push notificationWordPress Pushe Web Push Notification Plugin <= 0.5.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- premiumbizthemes simple price calculatorWordPress Simple Price Calculator Plugin <= 1.3 - Broken Access Control Vulnerability6.5 Medium
- luis rock master paper collapse toggleWordPress Master Paper Collapse Toggle Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- debaat wp-graphvizWordPress WP-GraphViz Plugin <= 1.5.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- simasicher simacookieWordPress SimaCookie Plugin <= 1.3.2 - Cross Site Request Forgery (CSRF) Vulnerability6.5 Medium
- simasicher simacookieWordPress SimaCookie Plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- remi corson easy download media counterWordPress Easy Download Media Counter Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- rami yushuvaev site infoWordPress Site Info Plugin <= 1.1 - Sensitive Data Exposure Vulnerability2.7 Low
- reimund compact adminWordPress Compact Admin plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- iamroody 金数据WordPress 金数据 Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- sdewijs zoomify embed for wpWordPress Zoomify embed for WP Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- george sexton wordpress events calendar plugin – connectdailyWordPress WordPress Events Calendar Plugin – connectDaily Plugin <= 1.5.5 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wp corner quick event calendarWordPress Quick Event Calendar Plugin <= 1.4.9 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- kaizencoders enable latexWordPress Enable Latex Plugin <= 1.2.16 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- david merinas add to feedlyWordPress Add to Feedly Plugin <= 1.2.11 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- wpbean wpb image widgetWordPress WPB Image Widget Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- kaizencoders table of contentWordPress Table of content Plugin <= 1.5.3.1 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- ablancodev woocommerce notify updated productWordPress Woocommerce Notify Updated Product Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability6.5 Medium
- denis v (artprima) ap honeypot wordpress pluginWordPress AP HoneyPot WordPress Plugin Plugin <= 1.4 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- samer bechara ultimate ajax loginWordPress Ultimate AJAX Login Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- otwthemes popping sidebars and widgets lightWordPress Popping Sidebars and Widgets Light Plugin <= 1.27 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- mark o'donnell mstw league managerWordPress MSTW League Manager Plugin <= 2.10 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- digitalcourt boxed contentWordPress Boxed Content Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- marcshowpass showpass wordpress extensionWordPress Showpass WordPress Extension Plugin <= 4.0.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- deepak s hide real download pathWordPress Hide Real Download Path Plugin <= 1.6 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- aakash1911 wp likesWordPress WP likes Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- yaidier wn flipbox proWordPress WN Flipbox Pro Plugin <= 2.1 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- dejan markovic wordpress buffer – hypesocial. social media auto post, social media auto publish and scheduleWordPress WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule Plugin <= 2020.1.0 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- chrishurst bulk watermarkWordPress Bulk Watermark Plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- subhash kumar database to excelWordPress Database to Excel Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- david merinas auto last youtube videoWordPress Auto Last Youtube Video Plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- givecloud donation forms wp by givecloudWordPress Donation Forms WP by Givecloud Plugin <= 1.0.9 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- john luetke media authorWordPress Media Author Plugin <= 1.0.4 - Broken Access Control Vulnerability5.5 Medium
- ibnul h. custom team managerWordPress Custom Team Manager Plugin <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- athemeart translations eds responsive menuWordPress eDS Responsive Menu Plugin <= 1.2 - PHP Object Injection Vulnerability7.2 High
- zakir smooth accordionWordPress Smooth Accordion Plugin <= 2.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- shiful h ss font awesome iconWordPress SS Font Awesome Icon Plugin <= 4.1.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- franz wieser fw ankerWordPress FW Anker Plugin <= 1.2.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- calliko bonus for wooWordPress Bonus for Woo plugin <= 7.6.6 - Other vulnerability Type vulnerability5.3 Medium
- gugu short.ioWordPress short.io Plugin <= 2.4.2 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- invelity mygls connectWordPress Invelity MyGLS connect Plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability8.8 High
- webvitaly search by googleWordPress Search by Google Plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- snagysandor parallax scrolling enllax.jsWordPress Parallax Scrolling Enllax.js Plugin <= 0.0.6 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- snagysandor parallax scrolling enllax.jsWordPress Parallax Scrolling Enllax.js Plugin <= 0.0.6 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- aitool ai auto tool content writing assistant (gemini writer, chatgpt ) all in oneWordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.3.3 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- codemstory 코드엠샵 소셜톡WordPress 코드엠샵 소셜톡 plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…