Skip to contentNotfound vulnerabilities
Newest
- extendyourweb ultimate video galleryWordPress ULTIMATE VIDEO GALLERY Plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-225667.1 High
- mywebtonet php/mysql cpu performance statisticsWordPress PHP/MySQL CPU performance statistics Plugin <= 1.2.1 - PHP Object Injection vulnerabilityCVE-2025-225269.8 Critical
- notfound scheduleWordPress Schedule Plugin <= 1.0.0 - SQL Injection vulnerabilityCVE-2025-225239.3 Critical
- notfound wp azure offloadWordPress WP Azure offload plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-223607.1 High
- boggibill getshop ecommerceWordPress GetShop ecommerce plugin <= 1.3 - Path Traversal vulnerabilityCVE-2024-543628.1 High
- labs64 pluginpassWordPress PluginPass plugin <= 0.9.10 - Arbitrary File Download/Delete vulnerabilityCVE-2024-542918.6 High
- dman25560 mediaviewMediaView <= 1.1.2 - Reflected Cross-Site Scripting via id ParameterCVE-2025-24816.1 Medium
- eurocizia wp google calendar managerWordPress WP Google Calendar Manager plugin <= 2.1 - SQL Injection vulnerabilityCVE-2025-289398.5 High
- chaozh simple post seriesWordPress Simple Post Series plugin <= 2.4.4 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-289347.1 High
- notfound zenphotopressWordPress ZenphotoPress plugin <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-289247.1 High
- homejunction spatialmatch idxWordPress SpatialMatch IDX plugin <= 3.0.9 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-289217.1 High
- notfound docproWordPress Docpro plugin <= 2.0.1 - Local File Inclusion vulnerabilityCVE-2025-289169.8 Critical
- hectorgarrofe driving directionsWordPress Driving Directions plugin <= 1.4.4 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-289037.1 High
- notfound wp event ticketingWordPress WP Event Ticketing plugin <= 1.3.4 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-288997.1 High
- govind visual text editorWordPress Visual Text Editor plugin <= 1.2.1 - Remote Code Execution (RCE) vulnerabilityCVE-2025-288939.9 Critical
- notfound lightview plusWordPress Lightview Plus plugin <= 3.1.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-288907.1 High
- notfound custom product stickers for woocommerceWordPress Custom Product Stickers for Woocommerce plugin <= 1.9.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-288897.1 High
- fiverraffiliates fiverr.com official search boxWordPress Fiverr.com Official Search Box plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-288856.5 Medium
- jotis blue captchaWordPress Blue Captcha plugin <= 1.7.4 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-288807.1 High
- m.tiggelaar key4ce osticket bridgeWordPress Key4ce osTicket Bridge plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-288777.1 High
- notfound shuffleWordPress Shuffle plugin <= 0.5 - SQL Injection vulnerabilityCVE-2025-288738.5 High
- notfound nextgen gallery votingWordPress NextGEN Gallery Voting plugin <= 2.7.6 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-288697.1 High
- notfound tbtestimonialsWordPress TBTestimonials Plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-265847.1 High
- jamrizzi technologies rizzi guestbookWordPress Rizzi Guestbook plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-265737.1 High
- frank in stock mailer for woocommerceWordPress In Stock Mailer for WooCommerce Plugin <= 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-265667.1 High
- kagla gnucommerceWordPress GNUCommerce Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-265647.1 High
- kkwangen wp contact form iiiWordPress WP Contact Form III Plugin <= 1.6.2d - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-265607.1 High
- chris taylor secure invitesWordPress Secure Invites plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-265596.5 Medium
- notfound cookies proWordPress Cookies Pro plugin <= 1.0 - CSRF to Stored XSS vulnerabilityCVE-2025-265467.1 High
- max k utm tags tracking for contact form 7WordPressUTM tags + Landing page plugin <= 1.4 - CSRF to Stored XSS vulnerabilityCVE-2025-265447.1 High
- dang ngoc binh zalo live chatWordPress Zalo Live Chat Plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-265427.1 High
- notfound gdpr toolsWordPress GDPR Tools plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-265376.5 Medium
- notfound theme demo barWordPress Theme Demo Bar Plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-251347.1 High
- ajitae google plusWordPress Google Plus Plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-239647.1 High
- alex furr linkedin liteWordPress LinkedIn Lite Plugin <= 1.0 - Local File Inclusion vulnerabilityCVE-2025-239378.1 High
- atelierhyper aumenuWordPress AuMenu plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237287.1 High
- notfound appreviewWordPress AppReview plugin <= 0.2.9 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-237147.1 High
- narnoo operator, notfound narnoo operator +1 moreWordPress Narnoo Operator plugin <= 2.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236807.1 High
- cxc-sawa management-screen-droptilesWordPress Management-screen-droptiles plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236667.1 High
- notfound frontend post submissionWordPress Frontend Post Submission plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236387.1 High
- khanhtruong wp database auditWordPress WP Database Audit plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236337.1 High
- notfound pixobe cartography, pixobe cartography +1 moreWordPress Pixobe Cartography plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-236127.1 High
- notfound rdp ingroups+WordPress RDP inGroups+ plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-235467.1 High
- fomopay fomo pay chinese payment solutionWordPress FOMO Pay Chinese Payment Solution plugin <= 2.0.4 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-235437.1 High
- notfound rws enquiry and lead follow-upWordPress RWS Enquiry And Lead Follow-up plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-234607.1 High
- notfound ns simple intro loaderWordPress NS Simple Intro Loader plugin <= 2.2.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-234597.1 High
- notfound include urlWordPress Include URL plugin <= 0.3.5 Cross Site Scripting (XSS) VulnerabilityCVE-2025-305936.5 Medium
- dourou flickr set slideshowsWordPress Flickr set slideshows plugin <= 0.9 - SQL Injection VulnerabilityCVE-2025-305908.5 High
- fs-code fs posterWordPress FS Poster plugin <= 6.5.8 - SQL Injection vulnerabilityCVE-2025-269788.5 High
- aldo latino privatecontentWordPress PrivateContent plugin <= 8.11.5 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-269727.1 High
- Show moreLoading…