CVEs published in September 2025
4,150 vulnerabilities, 293 critical, 16 exploited.
- dtbaker stylepress for elementorWordPress StylePress for Elementor Plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- yonisink custom post type imagesWordPress Custom Post Type Images Plugin <= 0.5 - Cross Site Request Forgery (CSRF) Vulnerability9.6 Critical
- picture-planet gmbh verowa connectWordPress Verowa Connect plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- jonathan brinley doaj exportWordPress DOAJ Export Plugin <= 1.0.4 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- nk lazy blocksWordPress Lazy Blocks Plugin <= 4.1.0 - Broken Access Control Vulnerability4.3 Medium
- ronald huereca highlight and shareWordPress Highlight and Share – Social Text and Image Sharing plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- scriptsbundle nokriWordPress Nokri Theme <= 1.6.4 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- presspage entertainment inc mavis https to http redirectionWordPress Mavis HTTPS to HTTP Redirection Plugin <= 1.4.3 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- listingthemes sweet energy efficiencyWordPress Sweet Energy Efficiency plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- artbees jupiterx coreWordPress JupiterX Core Plugin <= 4.11.0 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- buddydev buddypress notification widgetWordPress BuddyPress Notification Widget Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- stonehenge creations events manager – openstreetmapsWordPress Events Manager – OpenStreetMaps Plugin <= 4.2.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- wpmk pdf generatorWordPress WPMK PDF Generator Plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- aftabul islam stock messageWordPress Stock Message Plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- wedevs wp project managerWordPress WP Project Manager Plugin <= 2.6.25 - Sensitive Data Exposure Vulnerability5.3 Medium
- anyclip video platform luminous studioWordPress AnyClip Luminous Studio Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- nix solutions ltd anti-spam lightWordPress NIX Anti-Spam Light Plugin <= 0.0.4 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- gravitate automated testerWordPress Gravitate Automated Tester Plugin <= 1.4.5 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- will.i.am simple restaurant menuWordPress Simple Restaurant Menu Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- chtombleson mobi2goWordPress Mobi2Go Plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- nicu micle simple jwt loginWordPress Simple JWT Login plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- syed balkhi all in one seo packWordPress All In One SEO Pack Plugin <= 4.8.7.1 - Sensitive Data Exposure Vulnerability4.3 Medium
- playerjsWordPress PlayerJS Plugin <= 2.24 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- syed balkhi all in one seo packWordPress All In One SEO Pack Plugin <= 4.8.7.1 - Broken Access Control Vulnerability5.4 Medium
- themepoints carousel ultimateWordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- michel - xiligroup dev xili-languageWordPress xili-language Plugin <= 2.21.3 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- js morisset jsm file get contents() shortcodeWordPress JSM file_get_contents() Shortcode Plugin <= 2.7.1 - Cross Site Scripting (XSS) Vulnerability6.5 Medium
- mat category featured imagesWordPress Category Featured Images Plugin <= 1.1.8 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- risto niinemets estonian shipping methods for woocommerceWordPress Estonian Shipping Methods for WooCommerce Plugin <= 1.7.2 - Sensitive Data Exposure Vulnerability5.3 Medium
- proof factor llc factor – social proof notificationsWordPress Proof Factor – Social Proof Notifications Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- becheran gridWordPress Grid plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- essekia helpie faqWordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability5.3 Medium
- brandexponents oshine coreWordPress Oshine Core Plugin <= 1.5.5 - Broken Access Control Vulnerability5.4 Medium
- ezee technosys online hotel booking engineWordPress eZee Online Hotel Booking Engine Plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- awesomesupport awesome supportWordPress Awesome Support plugin <= 6.3.5 - Deserialization of untrusted data vulnerability7.2 High
- azizul hasan text to speech tts accessibilityWordPress Text To Speech TTS Accessibility plugin <= 1.9.30 - Broken Access Control vulnerability4.3 Medium
- themeum qubelyWordPress Qubely Plugin <= 1.8.14 - Broken Access Control Vulnerability4.3 Medium
- tmontg1 form generator for wordpressWordPress Form Generator for WordPress Plugin <= 1.52 - Cross Site Scripting (XSS) Vulnerability5.9 Medium
- cridiostudio listingpro reviewsWordPress ListingPro Reviews plugin < 2.9.11 - Broken Access Control vulnerability5.4 Medium
- kommo website chat button: kommo integrationWordPress Website Chat Button: Kommo integration Plugin <= 1.3.1 - Broken Access Control Vulnerability4.3 Medium
- vibethemes wplms, wordpress learning management system +1 moreWordPress WPLMS theme <= 4.970 - Broken Access Control vulnerability4.3 Medium
- modern minds magento 2 wordpress integrationWordPress Magento 2 WordPress Integration plugin <= 1.4.2.1 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- morganrichards auction feedWordPress Auction Feed plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- shankaranand maurya wp content protectionWordPress WP Content Protection Plugin <= 1.3 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- wedevs wp user frontendWordPress WP User Frontend Plugin <= 4.1.12 - Broken Access Control Vulnerability5.4 Medium
- tryinteract interact: embed a quiz on your siteWordPress Interact: Embed A Quiz On Your Site Plugin <= 3.1 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- wedevs wp user frontendWordPress WP User Frontend Plugin <= 4.1.12 - Content Injection Vulnerability5.4 Medium
- extendyourweb horizontal sliderWordPress HORIZONTAL SLIDER Plugin <= 2.4 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- puravida1976 shrinktheweb (stw) website previewsWordPress ShrinkTheWeb (STW) Website Previews Plugin <= 2.8.5 - Cross Site Request Forgery (CSRF) Vulnerability7.1 High
- appmysiteWordPress AppMySite plugin <= 3.15.0 - Broken Access Control vulnerability5.3 Medium
- Show moreLoading…