Skip to contentNotfound vulnerabilities
Newest
- freshface fresh frameworkWordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Broken Access Control vulnerabilityCVE-2025-269618.6 High
- notfound pie register premiumWordPress Pie Register Premium plugin <= 3.8.3.2 - Path Traversal to Non-Arbitrary File Deletion vulnerabilityCVE-2025-269406.3 Medium
- notfound debug-bar-extenderWordPress Debug-Bar-Extender Plugin <= 0.5 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-265557.1 High
- nicola mustone wp discord postWordPress WP Discord Post Plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-265547.1 High
- kdmurray random image selectorWordPress Random Image Selector plugin <= 1.5.6 - Reflected Cross-Site Scripting vulnerabilityCVE-2025-265487.1 High
- notfound scheduleSchedule <= 1.0.0 - Reflected XSSCVE-2024-138917.1 High
- notfound seo toolsSEO Tools <= 4.0.7 - Reflected XSSCVE-2024-138536.1 Medium
- notfound xv random quotesXV Random Quotes <= 1.40 - Settings Reset via CSRFCVE-2024-135804.3 Medium
- notfound xv random quotesXV Random Quotes <= 1.40 - Reflected XSSCVE-2024-135747.1 High
- freshface fresh frameworkWordPress Fresh Framework plugin <= 1.70.0 - Unauthenticated Remote Code Execution (RCE) vulnerabilityCVE-2025-2693610.0 Critical
- freshface ark theme core, arktheme the ark +1 moreWordPress Ark Theme Core plugin < 1.71.0 - Unauthenticated Remote Code Execution (RCE) vulnerabilityCVE-2025-2697010.0 Critical
- lynk flashfaderWordPress Flashfader Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-272797.1 High
- david ghedini acugis leaflet mapsWordPress AcuGIS Leaflet Maps Plugin <= 5.1.1.0 - Multiple Cross Site Scripting (XSS) vulnerabilitiesCVE-2025-272787.1 High
- axelkeller gpx viewerWordPress GPX Viewer plugin <= 2.2.11 - Path Traversal vulnerabilityCVE-2025-272744.9 Medium
- alberto cocchiara db tables import/exportWordPress DB Tables Import/Export Plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-272717.1 High
- anton aleksandrov .htaccess login blockWordPress .htaccess Login block Plugin <= 0.9a - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-272697.1 High
- creativeitem doctor appointment bookingWordPress Doctor Appointment Booking Plugin <= 1.0.0 - Local File Inclusion vulnerabilityCVE-2025-272647.5 High
- creativeitem doctor appointment bookingWordPress Doctor Appointment Booking Plugin <= 1.0.0 - SQL Injection vulnerabilityCVE-2025-272638.5 High
- cristopher dino ie css3 supportWordPress IE CSS3 Support Plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-265897.1 High
- gabrielperezs ttt cropWordPress TTT Crop Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-265887.1 High
- nghorta sidebartabsWordPress sidebarTabs Plugin <= 3.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-265877.1 High
- abelony events plannerWordPress Events Planner Plugin <= 1.3.10 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-265867.1 High
- dyadyalesha dl leadbackWordPress DL Leadback Plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-265857.1 High
- muneeb mobileWordPress Rocket Mobile Plugin <= 0.4.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-265637.1 High
- notfound viperbarWordPress ViperBar Plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-265577.1 High
- helloprintWordPress Helloprint Plugin <= 2.0.7 - Arbitrary File Deletion vulnerabilityCVE-2025-265407.7 High
- helloprintWordPress Helloprint Plugin <= 2.0.7 - Arbitrary File Deletion vulnerabilityCVE-2025-265348.6 High
- dotsquaresltd migrate postsWordPress Migrate Posts Plugin <=1.0 - Post Based Cross Site Scripting (XSS) vulnerabilityCVE-2025-251707.1 High
- notfound authors autocomplete meta boxWordPress Authors Autocomplete Meta Box plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-251697.1 High
- notfound meta acceleratorWordPress Meta Accelerator plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-251647.1 High
- kutu62 sports rankings and listsWordPress Sports Rankings and Lists plugin <= 2.3 - Arbitrary File Download vulnerabilityCVE-2025-251627.1 High
- notfound wp find your nearestWordPress WP Find Your Nearest Plugin <= 0.3.1 - CSRF to Settings Change vulnerabilityCVE-2025-251617.1 High
- antonio sanchez uncomplicated seoWordPress Uncomplicated SEO plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-251587.1 High
- notfound wp church centerWordPress WP Church Center Plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-251577.1 High
- notfound wp less compilerWordPress WP Less Compiler plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-251427.1 High
- kareemsultan social linksWordPress Social Links plugin <= 1.0.11 - Stored Cross-Site Scripting vulnerabilityCVE-2025-251376.5 Medium
- newbiesup wp frontend submitWordPress WP Frontend Submit Plugin <= 1.1.0 - Reflected Cross-Site Scripting vulnerabilityCVE-2025-251337.1 High
- notfound delete comments by statusWordPress Delete Comments By Status plugin <= 1.5.3 - Local File Inclusion vulnerabilityCVE-2025-251307.5 High
- notfound callback requestWordPress Callback Request plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-251297.1 High
- hashshop wizshopWordPress WizShop Plugin <= 3.0.2 - Local File Inclusion vulnerabilityCVE-2025-251228.1 High
- notfound theme options zWordPress Theme Options Z Plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-251215.4 Medium
- alejandro aranda woocommerce oscommerce syncWordPress Woocommerce osCommerce Sync plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-251197.1 High
- danish ali malik top bar – popups – by wpoptinWordPress WPOptin plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-251187.1 High
- notfound like dislike plus counterWordPress Like dislike plus counter plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-251156.5 Medium
- notfound implied cookie consentWordPress Implied Cookie Consent plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-251137.1 High
- kareemsultan social linksWordPress Social Links plugin <= 1.2 - SQL Injection vulnerabilityCVE-2025-251127.6 High
- joomsky wp vehicle managerWordPress Vehicle Manager plugin <= 3.1 - Local File Inclusion vulnerabilityCVE-2025-251098.1 High
- josh harrison yahoo bossWordPress Yahoo BOSS Plugin <= 0.7 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-251027.1 High
- notfound seekxl snaprWordPress seekXL Snapr plugin <= 2.0.6 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-250877.1 High
- antrouss unitimetableWordPress UniTimetable plugin <= 1.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-250846.5 Medium
- Show moreLoading…