Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-58260 | 6.5 (v3.1) | WordPress Highlight and Share – Social Text and Image … |
Ronald Huereca |
Highlight and Share |
2025-09-22T18:23:22.061Z | 2026-04-28T16:13:43.640Z |
| cve-2025-58253 | 6.5 (v3.1) | WordPress Real Estate Manager Plugin <= 7.3 - Cross Si… |
Rameez Iqbal |
Real Estate Manager |
2025-09-22T18:23:27.273Z | 2026-04-28T16:13:43.635Z |
| cve-2025-58255 | 9.6 (v3.1) | WordPress Custom Post Type Images Plugin <= 0.5 - Cros… |
yonisink |
Custom Post Type Images |
2025-09-22T18:23:25.841Z | 2026-04-28T16:13:43.634Z |
| cve-2025-58266 | 5.9 (v3.1) | WordPress Gianism plugin <= 6.0.0 - Cross Site Scripti… |
Fumiki Takahashi |
Gianism |
2025-09-22T18:23:17.641Z | 2026-04-28T16:13:43.476Z |
| cve-2025-58262 | 7.1 (v3.1) | WordPress Sweet Energy Efficiency plugin <= 1.0.8 - Cr… |
WPDirectoryKit |
Sweet Energy Efficiency |
2025-09-22T18:23:20.657Z | 2026-04-28T16:13:43.457Z |
| cve-2025-58261 | 7.1 (v3.1) | WordPress Mavis HTTPS to HTTP Redirection Plugin <= 1.… |
PressPage Entertainment Inc |
Mavis HTTPS to HTTP Redirection |
2025-09-22T18:23:21.359Z | 2026-04-28T16:13:43.457Z |
| cve-2025-58248 | 6.5 (v3.1) | WordPress Pinterest Pinboard Widget Plugin <= 1.0.7 - … |
codefish |
Pinterest Pinboard Widget |
2025-09-22T18:23:30.792Z | 2026-04-28T16:13:43.419Z |
| cve-2025-58267 | 7.1 (v3.1) | WordPress Stock Message Plugin <= 1.1.0 - Cross Site R… |
Aftabul Islam |
Stock Message |
2025-09-22T18:23:16.939Z | 2026-04-28T16:13:43.418Z |
| cve-2025-58257 | 6.5 (v3.1) | WordPress Verowa Connect plugin <= 3.2.3 - Cross Site … |
Picture-Planet GmbH |
Verowa Connect |
2025-09-22T18:23:24.186Z | 2026-04-28T16:13:43.408Z |
| cve-2025-58251 | 4.3 (v3.1) | WordPress Sticky Header Effects for Elementor Plugin <… |
POSIMYTH |
Sticky Header Effects for Elementor |
2025-09-22T18:23:28.681Z | 2026-04-28T16:13:43.387Z |
| cve-2025-58258 | 4.3 (v3.1) | WordPress Lazy Blocks Plugin <= 4.1.0 - Broken Access … |
nK |
Lazy Blocks |
2025-09-22T18:23:23.450Z | 2026-04-28T16:13:43.331Z |
| cve-2025-58256 | 5.9 (v3.1) | WordPress DOAJ Export Plugin <= 1.0.4 - Cross Site Scr… |
Jonathan Brinley |
DOAJ Export |
2025-09-22T18:23:24.872Z | 2026-04-28T16:13:43.065Z |
| cve-2025-58252 | 4.3 (v3.1) | WordPress Getwid Plugin <= 2.1.2 - Sensitive Data Expo… |
jetmonsters |
Getwid |
2025-09-22T18:23:27.989Z | 2026-04-28T16:13:43.043Z |
| cve-2025-58254 | 6.5 (v3.1) | WordPress StylePress for Elementor Plugin <= 1.2.1 - C… |
dtbaker |
StylePress for Elementor |
2025-09-22T18:23:26.587Z | 2026-04-28T16:13:43.042Z |
| cve-2025-58259 | 7.1 (v3.1) | WordPress Nokri Theme <= 1.6.4 - Cross Site Request Fo… |
scriptsbundle |
Nokri |
2025-09-22T18:23:22.764Z | 2026-04-28T16:13:43.000Z |
| cve-2025-58250 | 8.8 (v3.1) | WordPress Findgo Theme <= 1.3.55 - Cross Site Request … |
ApusTheme |
Findgo |
2025-09-22T18:23:29.373Z | 2026-04-28T16:13:42.997Z |
| cve-2025-58249 | 4.3 (v3.1) | WordPress Qubely Plugin <= 1.8.14 - Sensitive Data Exp… |
Themeum |
Qubely |
2025-09-22T18:23:30.092Z | 2026-04-28T16:13:42.914Z |
| cve-2025-58246 | 4.3 (v3.1) | WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exp… |
WordPress |
WordPress |
2025-09-23T17:17:12.399Z | 2026-04-28T16:13:42.821Z |
| cve-2025-58247 | 5.3 (v3.1) | WordPress TI WooCommerce Wishlist plugin <= 2.10.0 - B… |
templateinvaders |
TI WooCommerce Wishlist |
2025-09-22T18:23:31.503Z | 2026-04-28T16:13:42.806Z |
| cve-2025-58238 | 6.5 (v3.1) | WordPress PilotPress Plugin <= 2.0.36 - Cross Site Scr… |
ONTRAPORT |
PilotPress |
2025-09-22T18:23:36.801Z | 2026-04-28T16:13:42.797Z |
| cve-2025-58243 | 5.3 (v3.1) | WordPress imEvent Theme <= 3.4.0 - Broken Access Contr… |
Jthemes |
imEvent |
2025-11-06T15:54:19.824Z | 2026-04-28T16:13:42.784Z |
| cve-2025-58242 | 6.5 (v3.1) | WordPress Bg Church Memos Plugin <= 1.1 - Cross Site S… |
Vadim Bogaiskov |
Bg Church Memos |
2025-09-22T18:23:33.728Z | 2026-04-28T16:13:42.778Z |
| cve-2025-58244 | 8.8 (v3.1) | WordPress Constructo Theme <= 4.3.9 - Cross Site Reque… |
Anps |
Constructo |
2025-09-22T18:23:32.971Z | 2026-04-28T16:13:42.768Z |
| cve-2025-58241 | 6.5 (v3.1) | WordPress SnapWidget Social Photo Feed Widget Plugin <… |
snapwidget |
SnapWidget Social Photo Feed Widget |
2025-09-22T18:23:34.545Z | 2026-04-28T16:13:42.764Z |
| cve-2025-58240 | 6.5 (v3.1) | WordPress xili-tidy-tags Plugin <= 1.12.06 - Cross Sit… |
Michel - xiligroup dev |
xili-tidy-tags |
2025-09-22T18:23:35.382Z | 2026-04-28T16:13:42.764Z |
| cve-2025-58245 | 5.9 (v3.1) | WordPress Portfolio Plugin <= 2.58 - Cross Site Scrip… |
bestweblayout |
Portfolio |
2025-09-22T18:23:32.245Z | 2026-04-28T16:13:42.762Z |
| cve-2025-58237 | 6.5 (v3.1) | WordPress LC Wizard plugin <= 2.2.4 - Cross Site Scrip… |
Niaj Morshed |
LC Wizard |
2025-09-22T18:23:37.472Z | 2026-04-28T16:13:42.721Z |
| cve-2025-58234 | 6.5 (v3.1) | WordPress JS Job Manager Plugin <= 2.0.2 - Cross Site … |
JoomSky |
JS Job Manager |
2025-09-22T18:23:39.537Z | 2026-04-28T16:13:42.721Z |
| cve-2025-58239 | 6.5 (v3.1) | WordPress WP Category Dropdown Plugin <= 1.9 - Cross S… |
Chandrika Sista |
WP Category Dropdown |
2025-09-22T18:23:36.097Z | 2026-04-28T16:13:42.720Z |
| cve-2025-58236 | 4.3 (v3.1) | WordPress Force Update Translations plugin <= 0.5 - Cr… |
Mayo Moriyama |
Force Update Translations |
2025-09-22T18:23:38.145Z | 2026-04-28T16:13:42.700Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-168 | Multiples vulnérabilités dans les produits IBM | 2022-02-22T00:00:00.000000 | 2022-02-22T00:00:00.000000 |
| certfr-2022-avi-167 | Multiples vulnérabilités dans Adobe Commerce | 2022-02-21T00:00:00.000000 | 2022-02-21T00:00:00.000000 |
| certfr-2022-avi-166 | Vulnérabilité dans Juniper Junos OS | 2022-02-21T00:00:00.000000 | 2022-02-21T00:00:00.000000 |
| certfr-2022-avi-165 | Vulnérabilité dans Broadcom Brocade Fabric | 2022-02-18T00:00:00.000000 | 2022-02-18T00:00:00.000000 |
| certfr-2022-avi-164 | Multiples vulnérabilités dans Siemens Simcenter Femap | 2022-02-18T00:00:00.000000 | 2022-02-18T00:00:00.000000 |
| certfr-2022-avi-163 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-02-18T00:00:00.000000 | 2022-02-18T00:00:00.000000 |
| certfr-2022-avi-162 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-02-18T00:00:00.000000 | 2022-02-18T00:00:00.000000 |
| certfr-2020-avi-550 | Multiples vulnérabilités dans les produits Siemens | 2020-09-08T00:00:00.000000 | 2022-02-18T00:00:00.000000 |
| certfr-2022-avi-160 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-02-17T00:00:00.000000 | 2022-02-17T00:00:00.000000 |
| certfr-2022-avi-159 | Vulnérabilité dans Moxa MGate | 2022-02-17T00:00:00.000000 | 2022-02-17T00:00:00.000000 |
| certfr-2022-avi-158 | Multiples vulnérabilités dans Drupal core | 2022-02-17T00:00:00.000000 | 2022-02-17T00:00:00.000000 |
| certfr-2022-avi-157 | Multiples vulnérabilités dans Microsoft Edge | 2022-02-17T00:00:00.000000 | 2022-02-17T00:00:00.000000 |
| certfr-2022-avi-156 | Vulnérabilité dans Cisco Email Security Appliance | 2022-02-17T00:00:00.000000 | 2022-02-17T00:00:00.000000 |
| certfr-2022-avi-155 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-02-17T00:00:00.000000 | 2022-02-17T00:00:00.000000 |
| certfr-2022-avi-154 | Vulnérabilité dans IBM Integrated Analytics System | 2022-02-16T00:00:00.000000 | 2022-02-16T00:00:00.000000 |
| certfr-2022-avi-153 | Vulnérabilité dans Mozilla Thunderbird | 2022-02-16T00:00:00.000000 | 2022-02-16T00:00:00.000000 |
| certfr-2022-avi-152 | Multiples vulnérabilités dans Trend Micro Apex One | 2022-02-16T00:00:00.000000 | 2022-02-16T00:00:00.000000 |
| certfr-2022-avi-151 | Vulnérabilité dans VMware NSX Data Center | 2022-02-16T00:00:00.000000 | 2022-02-16T00:00:00.000000 |
| certfr-2022-avi-150 | Vulnérabilité dans Ivanti Service Manager | 2022-02-15T00:00:00.000000 | 2022-02-15T00:00:00.000000 |
| certfr-2022-avi-149 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-02-15T00:00:00.000000 | 2022-02-15T00:00:00.000000 |
| certfr-2022-avi-148 | Multiples vulnérabilités dans les produits VMware | 2022-02-15T00:00:00.000000 | 2022-02-15T00:00:00.000000 |
| certfr-2022-avi-147 | Multiples vulnérabilités dans Google Chrome | 2022-02-15T00:00:00.000000 | 2022-02-15T00:00:00.000000 |
| certfr-2022-avi-146 | Vulnérabilité dans Axis IP Utility | 2022-02-14T00:00:00.000000 | 2022-02-14T00:00:00.000000 |
| certfr-2022-avi-145 | Multiples vulnérabilités dans Mozilla Thunderbird | 2022-02-14T00:00:00.000000 | 2022-02-14T00:00:00.000000 |
| certfr-2022-avi-144 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-02-14T00:00:00.000000 | 2022-02-14T00:00:00.000000 |
| certfr-2022-avi-143 | Vulnérabilité dans Ruby on Rails | 2022-02-14T00:00:00.000000 | 2022-02-14T00:00:00.000000 |
| certfr-2022-avi-142 | Multiples vulnérabilités dans les produits Moxa | 2022-02-11T00:00:00.000000 | 2022-02-11T00:00:00.000000 |
| certfr-2022-avi-141 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-02-11T00:00:00.000000 | 2022-02-11T00:00:00.000000 |
| certfr-2022-avi-140 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-02-11T00:00:00.000000 | 2022-02-11T00:00:00.000000 |
| certfr-2022-avi-139 | Multiples vulnérabilités dans Wireshark | 2022-02-11T00:00:00.000000 | 2022-02-11T00:00:00.000000 |