CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- tenda o3, o3 firmware1.0.0.10\(2478\) +1 moreTenda O3 AdvSetLanip GetValue stack-based overflow8.7 High
- tenda o3, o3 firmware1.0.0.10\(2478\) +1 moreTenda O3 setDhcpConfig GetValue stack-based overflow8.7 High
- mayurik best house rental management systemSourceCodester Best House Rental Management System admin_class.php login2 sql injection6.9 Medium
- kamailioKamailio Grammar Rule cfg.y yyerror_at null pointer dereference4.8 Medium
- kamailioKamailio rvalue.c rve_is_constant null pointer dereference4.8 Medium
- kamailioKamailio Configuration File cfg.lex sr_push_yy_state use after free4.8 Medium
- brainstorm force ultimate addons for wpbakery page builderWordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- waituk entradaWordPress Entrada theme <= 5.7.7 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- kamailioKamailio Configuration File rvalue.c rve_destroy heap-based overflow4.8 Medium
- givanz vvvebgivanz Vvveb Code Editor functions.php sanitizeFileName path traversal5.3 Medium
- codeless slider templatesWordPress Slider Templates plugin <= 1.0.3 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- builderall builder for wordpressWordPress Builderall Builder for WordPress plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- fanbridge signupWordPress FanBridge signup plugin <= 0.6 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- llamaman simple pull quoteWordPress Simple Pull Quote plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wpeka wp adcenterWordPress WP AdCenter plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sudar muthu posts by tagWordPress Posts By Tag plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- sarah giles dynamic user directoryWordPress Dynamic User Directory plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- crm perks wp gravity forms zoho crm and biginWordPress WP Gravity Forms Zoho CRM and Bigin plugin <= 1.2.8 - Open Redirection vulnerability4.7 Medium
- mdz persian admnin fontsWordPress Persian Admnin Fonts plugin <= 4.1.03 - Broken Access Control vulnerability5.4 Medium
- airesvsg acf to rest apiWordPress ACF to REST API plugin <= 3.3.4 - Sensitive Data Exposure vulnerability5.3 Medium
- kiotviet syncWordPress KiotViet Sync plugin <= 1.8.5 - Broken Access Control vulnerability4.3 Medium
- 沃之涛 百度站长seo合集(支持百度/神马/bing/头条推送)WordPress 百度站长SEO合集(支持百度/神马/Bing/头条推送) plugin <= 2.1.4 - Broken Access Control vulnerability5.3 Medium
- joovii sendle shippingWordPress Sendle Shipping plugin <= 6.02 - Broken Access Control vulnerability5.3 Medium
- raychatWordPress Raychat plugin <= 2.2.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- coschedule headline analyzerWordPress Headline Analyzer plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themekraft buddyformsWordPress BuddyForms plugin <= 2.10.2 - Broken Access Control vulnerability5.3 Medium
- webinarpressWordPress WebinarPress plugin <= 1.33.28 - Broken Access Control vulnerability4.3 Medium
- crestaproject attesa extraWordPress Attesa Extra plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- spencer haws link whisper freeWordPress Link Whisper Free plugin <= 0.9.2 - Broken Access Control vulnerability5.3 Medium
- xlplugins nextmove, nextmove lite +1 moreWordPress NextMove Lite plugin <= 2.23.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- infosatech wp last modified infoWordPress WP Last Modified Info plugin <= 1.9.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- designinvento directorypressWordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- apiki gocacheWordPress GoCache plugin <= 1.3.6 - Broken Access Control vulnerability5.4 Medium
- wpseek admin management xtendedWordPress Admin Management Xtended plugin <= 2.5.1 - Broken Access Control vulnerability4.3 Medium
- realmag777 mdtfWordPress MDTF plugin <= 1.3.6 - Broken Access Control vulnerability5.3 Medium
- estatikWordPress Estatik plugin <= 4.3.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- andrea landonio cloudsearchWordPress CloudSearch plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- videowhisper paid videochat turnkey siteWordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Remote Code Execution (RCE) vulnerability9.1 Critical
- clifton griffin simple content templates for blog posts & pagesWordPress Simple Content Templates for Blog Posts & Pages plugin <= 2.2.61 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- nikanwp woocommerce reportingWordPress NikanWP WooCommerce Reporting plugin <= 1.0.0 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- iseremet reloadlyWordPress Reloadly plugin <= 2.0.1 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- codeinwp revive old postsWordPress Revive Old Posts plugin <= 9.3.3 - Broken Access Control vulnerability4.3 Medium
- info@welcart welcart e-commerceWordPress Welcart e-Commerce plugin <= 2.11.24 - Broken Access Control vulnerability4.3 Medium
- quantumcloud chatbotWordPress ChatBot plugin <= 7.7.3 - Broken Access Control vulnerability4.3 Medium
- icc0rz h5pWordPress H5P plugin <= 1.16.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- buddydev activity plus reloaded for buddypressWordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- konstantin pankratov date counterWordPress Date counter plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- publitioWordPress Publitio plugin <= 2.2.5 - Sensitive Data Exposure vulnerability5.0 Medium
- everestthemes everest backupWordPress Everest Backup plugin <= 2.3.8 - Broken Access Control vulnerability5.3 Medium
- eduard pinuaga linares did prestashop displayWordPress Did Prestashop Display plugin <= 1.0.30 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- Show moreLoading…