Skip to contentNotfound vulnerabilities
Newest
- davidpuc simple shortcode buttonsWordPress Simple shortcode buttons plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-234497.1 High
- notfound mapbox for wp advancedWordPress Mapbox for WP Advanced Plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-227727.1 High
- crudlab image gallery box by crudlabWordPress Image Gallery Box by CRUDLab Plugin <= 1.0.3 - Local File Inclusion vulnerabilityCVE-2025-239387.5 High
- marko-m quick countWordPress Quick Count Plugin <= 3.00 - PHP Object Injection vulnerabilityCVE-2025-239329.8 Critical
- notfound wordpress local seoWordPress WordPress Local SEO plugin <= 2.3 - SQL Injection vulnerabilityCVE-2025-239319.3 Critical
- enrico sandoli smallerik file browserWordPress Smallerik File Browser plugin <= 1.1 - Arbitrary File Upload vulnerabilityCVE-2025-239189.9 Critical
- keighl menus plus+WordPress Menus Plus+ Plugin <= 1.9.6 - SQL Injection vulnerabilityCVE-2025-239108.5 High
- falcontheme team wp block packWordPress WP Block Pack plugin <= 1.1.6 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238747.1 High
- markcoker wordpress file searchWordPress WordPress File Search Plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238677.1 High
- e. marten eu dsgvo helperWordPress EU DSGVO Helper Plugin <= 1.0.6.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238667.1 High
- ghasemy14 wp2appWordPress WP2APP Plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238117.1 High
- david jeffrey contact form 7 round robin lead distributionWordPress Contact Form 7 Round Robin Lead Distribution Plugin <= 1.2.1 - SQL Injection vulnerabilityCVE-2025-237847.6 High
- notfound wm options import exportWordPress WM Options Import Export plugin <= 1.0.1 - Sensitive Data Exposure vulnerabilityCVE-2025-237817.5 High
- niket joshi wpdb to sqlWordPress WPDB to Sql plugin <= 1.2 - Sensitive Data Exposure vulnerabilityCVE-2025-237747.5 High
- dreamsofmatter content mirrorWordPress Content Mirror plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237697.1 High
- notfound pootle buttonWordPress pootle button plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237587.1 High
- franciscopalacios easy filteringWordPress Easy Filtering plugin <= 2.5.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237327.1 High
- milordk jet skinner for buddypressWordPress Jet Skinner for BuddyPress plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237067.1 High
- notfound staging cdnWordPress Staging CDN plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236967.1 High
- kinlane ctygrid hyp3rl0cal searchWordPress CtyGrid Hyp3rL0cal Search plugin <= 0.1.1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236957.1 High
- notfound macmeWordPress MACME plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236837.1 High
- bhuvnesh gupta preloader quotesWordPress Preloader Quotes plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236827.1 High
- md imranur rahman localgridWordPress LocalGrid plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236787.1 High
- notfound lh emailWordPress LH Email plugin <= 1.12 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236767.1 High
- andygauk bit.ly linkerWordPress Bit.ly linker plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236747.1 High
- notfound content plannerWordPress Content Planner plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236317.1 High
- irshad a.khan cyber sliderWordPress Cyber Slider plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236307.1 High
- notfound wh cache & securityWordPress WH Cache & Security plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236117.1 High
- notfound ultimate eventsWordPress Ultimate Events plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236107.1 High
- notfound calendiWordPress Calendi plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236067.1 High
- maeve lander rezdy reloadedWordPress Rezdy Reloaded plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-236047.1 High
- mohammadjafar khajeh group category creatorWordPress Group category creator plugin <= 1.3.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236037.1 High
- notfound tab my contentWordPress Tab My Content plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236017.1 High
- animexxx dformsWordPress dForms plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235927.1 High
- markugwuanyi contentoptin liteWordPress ContentOptin Lite plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235897.1 High
- bastien ho custom css addonsWordPress Custom CSS Addons plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235787.1 High
- notfound xlsxviewerWordPress XLSXviewer plugin <= 2.1.1 - Arbitrary File Deletion vulnerabilityCVE-2025-235627.5 High
- notfound customizable captcha and contact usWordPress Customizable Captcha and Contact us plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235037.1 High
- contentlocalized translation.proWordPress Translation.Pro plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-234987.1 High
- chetan khandla woocommerce order searchWordPress WooCommerce Order Search plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-234957.1 High
- notfound bonjour barWordPress Bonjour Bar plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-222625.9 Medium
- inspirythemes easy real estateWordPress Easy Real Estate plugin <= 2.2.6 - Privilege Escalation vulnerabilityCVE-2024-325559.8 Critical
- brizy, brizy pro, notfound brizy pro +2 moreWordPress Brizy Pro Plugin <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-227637.1 High
- dhananjaysingh multiple carouselWordPress Multiple Carousel Plugin <= 2.0 - SQL Injection vulnerabilityCVE-2025-225539.3 Critical
- deluxethemes private messages for userproWordPress Private Messages for UserPro plugin <= 4.10.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-223227.1 High
- deluxethemes private messages for userproWordPress Private Messages for UserPro plugin <= 4.10.0 - Local File Inclusion vulnerabilityCVE-2025-223117.5 High
- heroplugins hero mega menu - responsive wordpress menu pluginWordPress Hero Menu plugin <= 1.16.5 - SQL Injection vulnerabilityCVE-2024-493338.5 High
- heroplugins hero mega menu - responsive wordpress menu pluginWordPress Hero Menu plugin <= 1.16.5 - SQL Injection vulnerabilityCVE-2024-493038.5 High
- heroplugins hero mega menu - responsive wordpress menu pluginWordPress Hero Menu plugin <= 1.16.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-493007.1 High
- notfound links/problem reporterWordPress Links/Problem Reporter plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-238336.5 Medium
- Show moreLoading…