CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- jenkins start windocks container, jenkins project start windocks containers plugin +1 moreJenkins Start Windocks Containers Plugin vulnerable to cross-site request forgery4.3 Medium
- jenkins themis, jenkins project themis plugin +1 moreJenkins Themis Plugin is missing a permission check4.3 Medium
- jenkins themis, jenkins project themis plugin +1 moreJenkins Themis Plugin vulnerable to cross-site request forgery4.3 Medium
- jenkins eggplant runner, jenkins project eggplant runner plugin +1 moreJenkins Eggplant Runner Plugin protection mechanism disabled5.9 Medium
- jenkins jdepend, jenkins project jdepend plugin +1 moreJenkins JDepend Plugin vulnerable to XML external entity attacks7.1 High
- jenkins extensible choice parameter, jenkins project extensible choice parameter plugin +1 moreJenkins Extensible Choice Parameter Plugin vulnerable to cross-site request forgery5.4 Medium
- jenkins mcp server, jenkins project mcp server plugin +1 moreJenkins MCP Server Plugin does not perform permission checks in multiple MCP tools5.4 Medium
- jenkins saml, jenkins project saml plugin +1 moreJenkins SAML Plugin does not implement a replay cache7.5 High
- jgrietveld call now button – the #1 click to call button for wordpressCall Now Button <= 1.5.4 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions4.3 Medium
- jgrietveld call now button – the #1 click to call button for wordpressCall Now Button <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Settings Update4.3 Medium
- abb terra ac wallboxBSS(Block Started by Symbol) Memory Corruption Vulnerability6.9 Medium
- grupo castilla epsilon rhUnprotected access to parts of the application in Epsilon RH by Grupo Castilla6.9 Medium
next-authnpmNextAuthjs Email misdelivery Vulnerability6.9 Medium- redhat ansible automation platform, red hat ansible automation platform 2.5, ansible automation platform 2.5 for rhel 8 +5 more +7 moreEvent-driven-ansible: sensitive internal headers disclosure in aap eda event streams6.7 Medium
- redhat ansible automation platform, red hat ansible automation platform 2.5, ansible automation platform 2.5 for rhel 8 +5 more +7 moreEvent-driven-ansible: event stream test mode exposes sensitive headers in aap eda6.7 Medium
- litespeedtech litespeed cacheLiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting6.1 Medium
- i13websolution easy testimonial slider and formEasy Testimonial Slider and Form <= 1.0.2 - Authenticated (Admin+) SQL injection4.9 Medium
- i13websolution thumbnail slider with lightboxThumbnail Slider With Lightbox <= 1.0.4 - Authenticated (Admin+) SQL Injection4.9 Medium
- google kerasVulnerability in Keras Model.load_model Leading to Arbitrary Local File Loading and SSRF5.9 Medium
- premmerce user rolesWordPress Premmerce User Roles plugin <= 1.0.13 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- premmerce product search for woocommerceWordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- premmerce product search for woocommerceWordPress Premmerce Product Search for WooCommerce plugin <= 2.2.7 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- premmerceWordPress Premmerce plugin <= 1.3.19 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wpestate wp rentalsWordPress WP Rentals theme <= 3.13.1 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- premmerce wholesale pricing for woocommerceWordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Broken Access Control vulnerability5.4 Medium
- majestic support supportWordPress Majestic Support plugin <= 1.0.7 - Local File Inclusion vulnerability7.5 High
- rometheme rtmkitWordPress RTMKit plugin <= 1.6.7 - Insecure Direct Object References (IDOR) vulnerability6.5 Medium
- evergreen content poster content posterWordPress Evergreen Content Poster plugin <= 1.4.5 - Broken Access Control vulnerability4.3 Medium
- boldgrid client invoicing by sprout invoicesWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - Broken Access Control vulnerability4.3 Medium
- fantasticplugins sumo affiliates proWordPress SUMO Affiliates Pro plugin <= 11.0.0 - Sensitive Data Exposure vulnerability4.3 Medium
- colabrio stockie extraWordPress Stockie Extra plugin <= 1.2.11 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- reycommerce rey coreWordPress Rey Core plugin <= 3.1.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- strategy11 team business directoryWordPress Business Directory plugin <= 6.4.18 - Broken Access Control vulnerability4.3 Medium
- themesphere smartmagWordPress SmartMag theme <= 10.3.0 - Local File Inclusion vulnerability7.5 High
- stylemixthemes masterstudy lms proWordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability5.4 Medium
- stylemixthemes masterstudy elementor widgetsWordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability5.3 Medium
- stylemixthemes masterstudy elementor widgetsWordPress Masterstudy Elementor Widgets plugin <= 1.2.4 - Broken Access Control vulnerability5.4 Medium
- tielabs jannah - extensionsWordPress Jannah - Extensions plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- themesphere smartmagWordPress SmartMag theme <= 10.3.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- tielabs sahifaWordPress Sahifa theme < 5.8.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- blubrry powerpress podcastingWordPress PowerPress Podcasting plugin <= 11.13.12 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- villatheme email template customizer for woocommerceWordPress Email Template Customizer for WooCommerce plugin <= 1.2.17 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- wpestate wpresidenceWordPress wpresidence theme <= 5.3.2 - Broken Access Control vulnerability5.3 Medium
- sizam rehubWordPress Rehub theme < 19.9.9.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- thimpress edumaWordPress Eduma theme <= 5.7.6 - Local File Inclusion vulnerability7.5 High
- thimpress edumaWordPress Eduma theme <= 5.7.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- allegro marketing hpb seo plugin for wordpressWordPress hpb seo plugin for WordPress plugin <= 3.0.1 - Cross Site Request Forgery (CSRF) vulnerability7.1 High
- highwarden super store finderWordPress Super Store Finder plugin <= 7.5 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- solwin blog designer proWordPress Blog Designer PRO plugin <= 3.4.8 - Broken Access Control vulnerability5.3 Medium
- gitlabMissing Authorization in GitLab8.5 High
- Show moreLoading…