CVEs published in November 2025
3,062 vulnerabilities, 265 critical, 10 exploited.
- josh kohlbach woocommerce store toolkitWordPress WooCommerce Store Toolkit plugin <= 2.4.3 - Local File Inclusion vulnerability7.5 High
- josh kohlbach store exporterWordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability7.5 High
- kyle phillips favoritesWordPress Favorites plugin <= 2.3.6 - Local File Inclusion vulnerability7.5 High
- aguilatechnologies wp customer areaWordPress WP Customer Area plugin <= 8.3.5 - Local File Inclusion vulnerability7.5 High
- thimpress learnpress export importWordPress LearnPress Export Import plugin <= 4.1.2 - Local File Inclusion vulnerability7.5 High
- dedalx inhype - blog & magazine wordpress themeWordPress InHype - Blog & Magazine WordPress Theme theme <= 1.5.2 - Local File Inclusion vulnerability8.1 High
- dedalx saxon - viral content blog & magazine marketing wordpress themeWordPress Saxon - Viral Content Blog & Magazine Marketing WordPress Theme theme <= 1.9.3 - Local File Inclusion vulnerability8.1 High
- owenr88 simple contact formsWordPress Simple Contact Forms plugin <= 1.6.4 - Local File Inclusion vulnerability8.1 High
- clearblue clearblue® ovulation calculatorWordPress Clearblue® Ovulation Calculator plugin <= 1.2.4 - Local File Inclusion vulnerability7.5 High
- vito peleg atarimWordPress Atarim plugin <= 4.2.1 - Privilege Escalation vulnerability9.8 Critical
- premmerce product search for woocommerceWordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Local File Inclusion vulnerability7.5 High
- premmerce user rolesWordPress Premmerce User Roles plugin <= 1.0.13 - Local File Inclusion vulnerability7.5 High
- premmerce wholesale pricing for woocommerceWordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerability7.5 High
- premmerce wishlist for woocommerceWordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerability7.5 High
- hinnerk altenburg immocaster wordpress pluginWordPress Immocaster WordPress Plugin plugin <= 1.3.6 - Local File Inclusion vulnerability8.1 High
- polopag – pix automático para woocommerceWordPress PoloPag – Pix Automático para Woocommerce plugin <= 2.0.9 - Local File Inclusion vulnerability7.5 High
- vito peleg atarimWordPress Atarim plugin <= 4.2.1 - Sensitive Data Exposure vulnerability7.5 High
- vito peleg atarimWordPress Atarim plugin <= 4.2.1 - Arbitrary File Upload vulnerability4.8 Medium
- processby lazy load optimizerWordPress Lazy Load Optimizer plugin <= 1.4.7 - Local File Inclusion vulnerability7.5 High
- processby responsive sidebarWordPress Responsive Sidebar plugin <= 1.2.2 - Local File Inclusion vulnerability7.5 High
- skygroup gostoreWordPress GoStore theme < 1.6.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- cristián lávaque s2memberWordPress s2Member Plugin <= 250701 - PHP Object Injection Vulnerability9.8 Critical
- helmut wandl advanced settingsWordPress Advanced Settings Plugin <= 3.1.1 - Arbitrary File Upload Vulnerability9.1 Critical
- creatives planet leblixWordPress Leblix Theme <= 2.4 - Local File Inclusion Vulnerability8.1 High
- designervily greenifyWordPress Greenify theme <= 2.2 - Local File Inclusion vulnerability8.1 High
- ganddser jock on air now (joan)WordPress Jock On Air Now (JOAN) plugin <= 6.0.4 - Broken Access Control vulnerability6.5 Medium
- dmitry v. (ceo of "ukr solution") barcode scanner with inventory & order managerWordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.10.4 - Path Traversal vulnerability7.2 High
- skygroup enzyWordPress Enzy theme < 1.6.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- e-plugins institutions directoryWordPress Institutions Directory Plugin <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability7.1 High
- crm perks wp gravity forms keap/infusionsoftWordPress WP Gravity Forms Keap/Infusionsoft Plugin <= 1.2.3 - Deserialization of untrusted data Vulnerability9.8 Critical
- kamleshyadav miraculousWordPress Miraculous theme < 2.0.9 - Arbitrary Content Deletion vulnerability7.5 High
- kamleshyadav miraculous core pluginWordPress Miraculous Core Plugin plugin < 2.0.9 - Insecure Direct Object References (IDOR) vulnerability9.8 Critical
- sbouey falang multilanguageWordPress Falang multilanguage Plugin <= 1.3.65 - PHP Object Injection Vulnerability8.8 High
- saad iqbal all in one loginWordPress All In One Login plugin <= 2.0.8 - Bypass Vulnerability vulnerability5.3 Medium
- cozmoslabs translatepressWordPress TranslatePress Plugin <= 2.10.2 - Deserialization of untrusted data Vulnerability8.1 High
- jthemes imeventWordPress imEvent Theme <= 3.4.0 - Broken Access Control Vulnerability5.3 Medium
- wp messiah ai image alt text generator for wpWordPress Ai Image Alt Text Generator for WP Plugin <= 1.1.5 - Broken Access Control Vulnerability8.2 High
- e4jvikwp vikbooking hotel booking engine & pmsWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Broken Access Control vulnerability5.3 Medium
- nootheme jobmonsterWordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerability7.1 High
- ex-themes wootourWordPress WooTour plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- thimpress rescaWordPress Resca theme <= 3.0.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- nootheme yogi - health beauty & yogaWordPress Yogi - Health Beauty & Yoga Theme <= 2.9.2 - Deserialization of untrusted data Vulnerability8.8 High
- nootheme yogi - health beauty & yogaWordPress Yogi - Health Beauty & Yoga theme <= 2.9.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- bplugins info cardsWordPress Info Cards Plugin <= 1.0.11 - Broken Access Control Vulnerability7.1 High
- nootheme wemusicWordPress WeMusic Theme <= 1.9.1 - PHP Object Injection Vulnerability8.8 High
- nootheme wemusicWordPress WeMusic theme <= 1.9.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- ptibogxiv doliconnectWordPress Doliconnect Plugin <= 9.3.2 - Cross Site Scripting (XSS) Vulnerability7.1 High
- jegtheme epic reviewWordPress Epic Review Plugin <= 1.0.2 - Cross Site Scripting (XSS) Vulnerability7.1 High
- laborator kaliumWordPress Kalium Theme <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability7.1 High
- codeyatri gutenifyWordPress Gutenify Plugin <= 1.5.7 - Cross Site Scripting (XSS) Vulnerability7.1 High
- Show moreLoading…