Skip to contentNotfound vulnerabilities
Newest
- notfound stray random quotesStray Random Quotes <= 1.9.9 - Reflected XSSCVE-2024-135706.1 Medium
- notfound guten free optionsGuten Free Options <= 0.9.5 - Reflected XSSCVE-2024-134926.1 Medium
- notfound traveler codeWordPress Traveler Code plugin < 3.1.3 - Subscriber+ Arbitrary SQL Execution vulnerabilityCVE-2025-227008.5 High
- notfound traveler codeWordPress Traveler Code plugin < 3.1.2 - Unauthenticated Arbitrary SQL Execution vulnerabilityCVE-2025-226999.0 Critical
- notfound traveler layout essential for elementorWordPress Traveler Layout Essential For Elementor plugin < 1.4 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2025-227015.4 Medium
- notfound admin and site enhancements (ase) proWordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.2.1 - Privilege Escalation vulnerabilityCVE-2024-433337.5 High
- hkharpreetkumar1 aio shortcodesWordPress AIO Shortcodes plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerabilityCVE-2025-246207.1 High
- notfound locketsWordPress Lockets Plugin <= 0.999 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-239237.1 High
- marco milesi wp cloudWordPress WP Cloud plugin <= 1.4.3 - Arbitrary File Deletion vulnerabilityCVE-2025-238197.5 High
- notfound pafacileWordPress PAFacile plugin <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237557.1 High
- notfound romancartWordPress RomanCart On WordPress plugin <= 0.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236857.1 High
- aarvansh infotech emarksheetWordPress eMarksheet plugin <= 5.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235997.1 High
- kvvaradha emailpressWordPress EmailPress plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235937.1 High
- notfound mll audio player mp3 ajaxWordPress MLL Audio Player MP3 Ajax plugin <= 0.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-235616.5 Medium
- notfound wpjobboardWordPress WPJobBoard plugin <= 5.10.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-247817.1 High
- notfound essential wp real estateEssential WP Real Estate <= 1.1.3 - Reflected XSSCVE-2024-133476.8 Medium
- brandexponents oshine modulesWordPress Oshine Modules plugin < 3.3.6 - Unauthenticated Server Side Request Forgery (SSRF) vulnerabilityCVE-2024-440555.4 Medium
- notfound storelyStorely <= 18 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-108476.4 Medium
- markodonnell team rostersTeam Rosters <= 4.7 - Reflected Cross-Site Scripting via 'tab'CVE-2024-123206.1 Medium
- notfound bridge coreWordPress Bridge Core plugin <= 3.3 - Broken Access Control vulnerabilityCVE-2025-247444.3 Medium
- notfound admin and site enhancements (ase) proWordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.1.1 - Broken Access Control vulnerabilityCVE-2025-246534.3 Medium
- clifton griffin cgd arrange termsWordPress CGD Arrange Terms plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237527.1 High
- notfound foogallery captionsWordPress FooGallery Captions Plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238897.1 High
- grandslambert custom page extensionsWordPress Custom Page Extensions Plugin <= 0.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-238887.1 High
- anildhiman mj contact usWordPress MJ Contact us Plugin <= 5.2.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238857.1 High
- asif shakeel sticky buttonWordPress Sticky Button plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-238397.1 High
- notfound bauernregelnWordPress Bauernregeln Plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238387.1 High
- martinjuhasz one backend languageWordPress One Backend Language Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238377.1 High
- notfound network-favoritesWordPress Network-Favorites plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237377.1 High
- casey bisson gigaom sphinxWordPress Gigaom Sphinx plugin <= 0.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237347.1 High
- notfound quote meWordPress Quote me plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237117.1 High
- notfound cbx accounting & bookkeepingWordPress CBX Accounting & Bookkeeping plugin <= 1.3.14 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236227.1 High
- algothemes causes – donation pluginWordPress Causes – Donation plugin <= 1.0.01 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236217.1 High
- moaluko store locatorWordPress Store Locator plugin <= 3.98.10 - Local File Inclusion vulnerabilityCVE-2025-234227.5 High
- jmraya legal +WordPress Legal + Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238357.1 High
- notfound links/problem reporterWordPress Links/Problem Reporter plugin <= 2.6.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238347.1 High
- flx0 flx dashboard groupsWordPress FLX Dashboard Groups plugin <= 0.0.7 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237307.1 High
- antonzaroutski az content finderWordPress AZ Content Finder plugin <= 0.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237277.1 High
- mind3dom ryebread widgets, notfound mind3dom ryebread widgets +1 moreWordPress Mind3doM RyeBread Widgets plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237227.1 High
- codehandling youtube video gridWordPress Youtube Video Grid plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236347.1 High
- muzaara google ads report, notfound muzaara google ads report +1 moreWordPress Muzaara Google Ads Report Plugin <= 3.1 - PHP Object Injection vulnerabilityCVE-2025-239149.8 Critical
- notfound blue wrench video widgetWordPress Blue Wrench Video Widget Plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238097.1 High
- misanthrop wp download codesWordPress WP Download Codes Plugin <= 2.5.4 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238827.1 High
- david jeffrey contact form 7 round robin lead distributionWordPress Contact Form 7 Round Robin Lead Distribution Plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238127.1 High
- inwavethemes infundingWordPress InFunding plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-237687.1 High
- edem cmc migrateWordPress CMC MIGRATE plugin <= 0.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237467.1 High
- a.ankit readme creatorWordPress ReadMe Creator plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236437.1 High
- imsoftware wp imap authWordPress WP IMAP Auth plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235067.1 High
- notfound database syncWordPress Database Sync plugin <= 0.5.1 - Sensitive Data Exposure vulnerabilityCVE-2025-234866.5 Medium
- anil jailta fwd sliderWordPress FWD Slider plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-234627.1 High
- Show moreLoading…