CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- appscreo hello followersWordPress Hello Followers plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- nickduncan nifty backupsWordPress Nifty Backups plugin <= 1.08 - Cross Site Scripting (XSS) vulnerability7.1 High
- globalis multisite clone duplicatorWordPress MultiSite Clone Duplicator plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- gesundheit bewegt gmbh zippyWordPress Zippy plugin <= 1.7.0 - Arbitrary File Upload vulnerability9.1 Critical
- fantasticplugins sumo memberships for woocommerceWordPress SUMO Memberships for WooCommerce plugin < 7.8.0 - Arbitrary Content Deletion vulnerability6.5 Medium
- infosatech wp last modified infoWordPress WP Last Modified Info plugin <= 1.9.4 - Remote Code Execution (RCE) vulnerability7.4 High
- chris taylor child themesWordPress Child Themes plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- selloio sello channelconnectorWordPress Sello ChannelConnector plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- supsystic contact form by supsysticWordPress Contact Form by Supsystic plugin <= 1.7.36 - Cross Site Scripting (XSS) vulnerability7.1 High
- themeatelier idonateproWordPress IDonatePro plugin <= 2.1.9 - Sensitive Data Exposure vulnerability6.5 Medium
- colome slide puzzleWordPress Slide Puzzle plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- juergen schulze emu2WordPress Emu2 plugin <= 0.83b - Cross Site Scripting (XSS) vulnerability7.1 High
- activity track uji countdownWordPress Uji Countdown plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- e-plugins directory proWordPress Directory Pro plugin <= 2.5.5 - Cross Site Scripting (XSS) Vulnerability7.1 High
- bobbingwide oik-privacy-policyWordPress oik-privacy-policy plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability7.1 High
- igor benic petsWordPress Pets Plugin <= 1.4.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- barry kooij post connectorWordPress Post Connector Plugin <= 1.0.11 - Cross Site Scripting (XSS) Vulnerability7.1 High
- hernan villanueva boldermailWordPress Boldermail Plugin <= 2.4.0 - PHP Object Injection Vulnerability8.8 High
- wikimedia foundation wikipedia previewWordPress Wikipedia Preview plugin <= 1.15.0 - Broken Access Control vulnerability6.5 Medium
- tijmen smit wp store locatorWordPress WP Store Locator plugin <= 2.2.260 - PHP Object Injection vulnerability8.8 High
- daman jeet finale liteWordPress Finale Lite Plugin <= 2.20.0 - Cross Site Scripting (XSS) Vulnerability7.1 High
- xlplugins nextmove, nextmove lite +1 moreWordPress NextMove Lite plugin <= 2.24.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- era404 croprefineWordPress CropRefine Plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- thimpress learnpress export importWordPress LearnPress Export Import plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability7.1 High
- growniche simple stripe checkoutWordPress Simple Stripe Checkout plugin <= 1.1.28 - Cross Site Scripting (XSS) vulnerability7.1 High
- usestrict bbpress notifyWordPress bbPress Notify plugin <= 2.19.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- breeze team checkoutWordPress Breeze Checkout plugin <= 1.4.0 - Broken Access Control vulnerability6.5 Medium
- leadbi plugin for wordpressWordPress LeadBI Plugin for WordPress plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- pascal casier bbpress move topicsWordPress bbPress Move Topics plugin <= 1.1.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- robokassa payment gateway for woocommerceWordPress Robokassa payment gateway for Woocommerce plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- weboccult technologies pvt ltd email attachment by order status & productsWordPress Email Attachment by Order Status & Products Plugin <= 1.0.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- anandaraj balu fade sliderWordPress Fade Slider plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- rajan vijayan wp smart flexsliderWordPress WP Smart Flexslider Plugin <= 2.5 - Cross Site Scripting (XSS) Vulnerability7.1 High
- mithra62 wp-click-trackerWordPress WP-Click-Tracker Plugin <= 0.7.3 - Cross Site Scripting (XSS) Vulnerability7.1 High
- themeinity sharebang, ultimate social share buttons for wordpressWordPress ShareBang, Ultimate Social Share Buttons for WordPress Plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability7.1 High
- favethemes houzezWordPress Houzez theme <= 4.2.5 - Insecure Direct Object References (IDOR) vulnerability6.5 Medium
- wpcrunch gappointmentsWordPress gAppointments Plugin <= 1.14.1 - Cross Site Scripting (XSS) Vulnerability7.1 High
- billingo official integration for billingoWordPress Official Integration for Billingo plugin <= 4.3.0 - Privilege Escalation vulnerability7.2 High
- templazeeWordPress Templazee plugin <= 1.0.2 - Broken Access Control Vulnerability5.4 Medium
- ahmad awais wp super editWordPress WP Super Edit plugin <= 2.5.4 - Cross Site Scripting (XSS) Vulnerability7.1 High
- extendons woocommerce registration fields plugin - custom signup fieldsWordPress WooCommerce Registration Fields Plugin - Custom Signup Fields plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- cynob it consultancy auto login after registrationWordPress Auto Login After Registration plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- kylegetson shortcode generatorWordPress Shortcode Generator plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- jonatan jumbert wpcode content ratioWordPress WPCode Content Ratio plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- themefusion fusion builderWordPress Fusion Builder plugin <= 3.13.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- crocoblock jetelements for elementorWordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- crocoblock jetengineWordPress JetEngine plugin <= 3.7.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- syed balkhi smash balloon social post feedWordPress Smash Balloon Social Post Feed plugin <= 4.3.2 - Broken Access Control vulnerability4.3 Medium
- xtemos woodmartWordPress WoodMart theme < 8.3.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- xtemos woodmartWordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability7.5 High
- Show moreLoading…