Skip to contentNotfound vulnerabilities
Newest
- dave lavoie ep4 more embedsWordPress EP4 More Embeds Plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerabilityCVE-2025-250837.1 High
- ed atrero album reviewerWordPress Album Reviewer plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-250707.1 High
- notfound wp easy post mailerWordPress WP Easy Post Mailer Plugin <= 0.64 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-239567.1 High
- notfound popliupWordPress Popliup Plugin <= 1.1.1 - Local File Inclusion vulnerabilityCVE-2025-239457.5 High
- notfound rebrand fluent formsWordPress Rebrand Fluent Forms Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-239047.1 High
- notfound local shipping labels for woocommerceWordPress Local Shipping Labels for WooCommerce Plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-239037.1 High
- notfound stray random quotesWordPress Stray Random Quotes Plugin <= 1.9.9 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238837.1 High
- littlejon lj custom menu linksWordPress LJ Custom Menu Links Plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238817.1 High
- notfound first comment redirectWordPress First Comment Redirect plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238527.1 High
- mojowill mojo under constructionWordPress Mojo Under Construction Plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238507.1 High
- notfound site launcherWordPress Site Launcher Plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238477.1 High
- codingkart woo update variations in cartWordPress Woo Update Variations In Cart plugin <= 0.0.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-238296.5 Medium
- crudlab like box, notfound crudlab like box +1 moreWordPress CRUDLab Like Box Plugin <= 2.0.9 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238147.1 High
- notfound guten free optionsWordPress Guten Free Options Plugin <= 0.9.7 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-238137.1 High
- justin sternberg dsgnwrks twitter importerWordPress DsgnWrks Twitter Importer plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237627.1 High
- digireturn dn sitemap controlWordPress DN Sitemap Control plugin <= 1.0.6 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237537.1 High
- florian chaillou notifications centerWordPress Notifications Center plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237417.1 High
- notfound easy school registrationWordPress Easy School Registration plugin <= 3.9.8 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237407.1 High
- jtibbles wp ultimate reviews freeWordPress WP Ultimate Reviews FREE plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237397.1 High
- notfound ps ads proWordPress Ps Ads Pro plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237387.1 High
- notfound form to jsonWordPress Form To JSON plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237367.1 High
- notfound comparepressWordPress ComparePress plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237267.1 High
- cloudvn mobigateWordPress Mobigate plugin <= 1.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237217.1 High
- mancx askme widget, notfound mancx askme widget +1 moreWordPress Mancx AskMe Widget plugin <= 0.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237187.1 High
- jkmas login watchdogWordPress Login Watchdog plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-237167.1 High
- editionskezzal cobwebo url pluginWordPress Cobwebo URL Plugin plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236887.1 High
- montashov 4 author cheer up donateWordPress 4 author cheer up donate plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236707.1 High
- mauricio urrego chatgpt open ai images & content for woocommerceWordPress ChatGPT Open AI Images & Content for WooCommerce plugin <= 2.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236687.1 High
- fxy060608 新淘客wordpress插件WordPress 新淘客WordPress插件 plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236377.1 High
- catch themes duplicate switcher, notfound catch duplicate switcher +1 moreWordPress Catch Duplicate Switcher plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236197.1 High
- notfound canalplanWordPress Canalplan plugin <= 5.31 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236167.1 High
- gtekelis interactive page hierarchyWordPress Interactive Page Hierarchy plugin <= 1.0.1 - Broken Access Control vulnerabilityCVE-2025-236156.5 Medium
- mediabeta wp journalWordPress WP Journal plugin <= 1.1 - Broken Access Control vulnerabilityCVE-2025-236136.5 Medium
- brainpulse page health-o-meterWordPress Page Health-O-Meter plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235957.1 High
- ashek al mahmud all-in-one-box-loginWordPress all-in-one-box-login plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235877.1 High
- mal73049 wp post category notificationsWordPress WP Post Category Notifications plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235867.1 High
- arsh91 pin locations on mapWordPress Pin Locations on Map plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235847.1 High
- digitalzoomstudio dzs ajaxer liteWordPress DZS Ajaxer Lite plugin <= 1.04 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-235796.5 Medium
- cfuze wp intro.jsWordPress WP Intro.JS Plugin plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235767.1 High
- devrix dx sales crmWordPress DX Sales CRM plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235757.1 High
- mitchell bundy wp social linksWordPress WP Social Links plugin <= 0.3.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235707.1 High
- chris taylor wibstatsWordPress Wibstats plugin <= 0.5.5 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235657.1 High
- mbyte explore pagesWordPress Explore pages plugin <= 1.01 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235637.1 High
- netbitsolutions push envoy notificationsWordPress Push Envoy Notifications plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-235567.1 High
- chenyenming ui slider filter by priceWordPress Ui Slider Filter By Price plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235557.1 High
- notfound textellerWordPress Texteller plugin <= 1.3.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235527.1 High
- agora32 maniac seoWordPress Maniac SEO plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235497.1 High
- notfound awesome hooksWordPress Awesome Hooks plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-235397.1 High
- notfound wp contestWordPress WP Contest plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235387.1 High
- mndpsingh287 track page scrollWordPress Track Page Scroll plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235367.1 High
- Show moreLoading…