Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-54684 | 5.9 (v3.1) | WordPress Integration for Contact Form 7 and Constant … |
CRM Perks |
Integration for Contact Form 7 and Constant Contact |
2025-08-14T10:34:47.187Z | 2026-04-28T16:13:33.997Z |
| cve-2025-54673 | 4.3 (v3.1) | WordPress Chartify plugin <= 3.5.3 - Cross Site Reques… |
Ays Pro |
Chartify |
2025-08-14T10:34:40.829Z | 2026-04-28T16:13:33.976Z |
| cve-2025-54672 | 4.3 (v3.1) | WordPress Photo Engine Plugin plugin <= 6.4.3 - Cross … |
Jordy Meow |
Photo Engine |
2025-08-14T10:34:40.287Z | 2026-04-28T16:13:33.949Z |
| cve-2025-54679 | 7.5 (v3.1) | WordPress Neon Channel Product Customizer Free Plugin … |
vertim |
Neon Channel Product Customizer Free |
2025-08-14T10:34:43.500Z | 2026-04-28T16:13:33.948Z |
| cve-2025-54678 | 9.3 (v3.1) | WordPress Easy Form Builder Plugin <= 3.8.15 - SQL Inj… |
hassantafreshi |
Easy Form Builder |
2025-08-14T10:34:42.955Z | 2026-04-28T16:13:33.940Z |
| cve-2025-54677 | 9.1 (v3.1) | WordPress Online Booking & Scheduling Calendar for Wor… |
vcita |
Online Booking & Scheduling Calendar for WordPress by vcita |
2025-08-20T08:02:52.476Z | 2026-04-28T16:13:33.894Z |
| cve-2025-54680 | 6.5 (v3.1) | WordPress Blogger Buzz Theme theme <= 1.2.6 - Cross Si… |
sparklewpthemes |
Blogger Buzz |
2025-08-14T10:34:44.021Z | 2026-04-28T16:13:33.846Z |
| cve-2025-54056 | 7.1 (v3.1) | WordPress Responsive HTML5 Audio Player PRO With Playl… |
LambertGroup |
Responsive HTML5 Audio Player PRO With Playlist |
2025-08-20T08:02:53.635Z | 2026-04-28T16:13:33.834Z |
| cve-2025-54053 | 6.6 (v3.1) | WordPress Groundhogg plugin <= 4.2.2 - PHP Object Inj… |
Adrian Tobey |
Groundhogg |
2025-08-20T08:02:54.742Z | 2026-04-28T16:13:33.816Z |
| cve-2025-54052 | 7.5 (v3.1) | WordPress Realtyna Organic IDX plugin <= 5.0.0 - Local… |
Realtyna |
Realtyna Organic IDX plugin |
2025-08-20T08:02:55.255Z | 2026-04-28T16:13:30.444Z |
| cve-2025-54055 | 7.1 (v3.1) | WordPress Druco <= 1.5.2 - Cross Site Scripting (XSS) … |
skygroup |
Druco |
2025-08-20T08:02:54.222Z | 2026-04-28T16:13:30.265Z |
| cve-2025-54054 | 6.5 (v3.1) | WordPress 12 Step Meeting List Plugin <= 3.18.3 - Cros… |
AA Web Servant |
12 Step Meeting List |
2025-08-14T18:21:48.649Z | 2026-04-28T16:13:30.163Z |
| cve-2025-54042 | 4.3 (v3.1) | WordPress WP Post Hide plugin <= 1.0.9 - Cross Site Re… |
Xfinitysoft |
WP Post Hide |
2025-07-16T10:36:50.745Z | 2026-04-28T16:13:29.809Z |
| cve-2025-54050 | 6.5 (v3.1) | WordPress Responsive Addons for Elementor plugin <= 1.… |
CyberChimps |
Responsive Addons for Elementor |
2025-07-16T10:36:52.246Z | 2026-04-28T16:13:29.802Z |
| cve-2025-54038 | 5.4 (v3.1) | WordPress Restaurant Menu by MotoPress plugin <= 2.4.6… |
jetmonsters |
Restaurant Menu by MotoPress |
2025-07-16T10:36:49.236Z | 2026-04-28T16:13:29.802Z |
| cve-2025-54048 | 9.3 (v3.1) | WordPress Custom API for WP <= 4.2.2 - SQL Injection V… |
miniOrange |
Custom API for WP |
2025-08-20T08:02:56.540Z | 2026-04-28T16:13:29.799Z |
| cve-2025-54047 | 4.3 (v3.1) | WordPress Cost Calculator plugin <= 7.4 - Broken Acces… |
QuanticaLabs |
Cost Calculator |
2025-07-16T10:36:51.744Z | 2026-04-28T16:13:29.794Z |
| cve-2025-54041 | 4.3 (v3.1) | WordPress Wallet System for WooCommerce plugin <= 2.6.… |
WP Swings |
Wallet System for WooCommerce |
2025-07-16T10:36:50.294Z | 2026-04-28T16:13:29.789Z |
| cve-2025-54051 | 6.5 (v3.1) | WordPress LightBox Block plugin <= 1.1.30 - Cross Site… |
bPlugins |
LightBox Block |
2025-07-16T10:36:52.703Z | 2026-04-28T16:13:29.788Z |
| cve-2025-54049 | 9.9 (v3.1) | WordPress Custom API for WP <= 4.2.2 - Privilege Escal… |
miniOrange |
Custom API for WP |
2025-08-20T08:02:55.961Z | 2026-04-28T16:13:29.775Z |
| cve-2025-54046 | 6.5 (v3.1) | WordPress Cost Calculator Plugin <= 7.4 - Cross Site S… |
QuanticaLabs |
Cost Calculator |
2025-08-20T08:02:57.124Z | 2026-04-28T16:13:29.774Z |
| cve-2025-54044 | 7.1 (v3.1) | WordPress Elite Video Player <= 10.0.5 - Cross Site Sc… |
_CreativeMedia_ |
Elite Video Player |
2025-08-20T08:02:57.647Z | 2026-04-28T16:13:29.770Z |
| cve-2025-54035 | 4.3 (v3.1) | WordPress Newsletters plugin <= 4.10 - Cross Site Requ… |
Tribulant Software |
Newsletters |
2025-07-16T10:36:47.797Z | 2026-04-28T16:13:29.770Z |
| cve-2025-54043 | 7.6 (v3.1) | WordPress SMTP for Amazon SES plugin <= 1.9 - SQL Inje… |
YayCommerce |
SMTP for Amazon SES |
2025-07-16T10:36:51.266Z | 2026-04-28T16:13:29.764Z |
| cve-2025-54045 | 4.3 (v3.1) | WordPress CM On Demand Search And Replace plugin <= 1.… |
CreativeMindsSolutions |
CM On Demand Search And Replace |
2025-12-16T08:12:46.351Z | 2026-04-28T16:13:29.730Z |
| cve-2025-54036 | 4.3 (v3.1) | WordPress Webba Booking plugin <= 5.1.20 - Cross Site … |
Webba Appointment Booking |
Webba Booking |
2025-07-16T10:36:48.274Z | 2026-04-28T16:13:29.717Z |
| cve-2025-54030 | 4.3 (v3.1) | WordPress WooCommerce Google Sheet Connector plugin <=… |
WesternDeal |
WooCommerce Google Sheet Connector |
2025-07-16T10:36:46.861Z | 2026-04-28T16:13:29.672Z |
| cve-2025-54037 | 5.4 (v3.1) | WordPress News Kit Elementor Addons plugin <= 1.3.4 - … |
blazethemes |
News Kit Elementor Addons |
2025-07-16T10:36:48.754Z | 2026-04-28T16:13:29.668Z |
| cve-2025-54039 | 4.3 (v3.1) | WordPress Animator plugin <= 3.0.16 - Cross Site Reque… |
Toast Plugins |
Animator |
2025-07-16T10:36:49.823Z | 2026-04-28T16:13:29.646Z |
| cve-2025-54033 | 6.5 (v3.1) | WordPress Theme Builder For Elementor plugin <= 1.2.3 … |
BlocksWP |
Theme Builder For Elementor |
2025-07-16T10:36:47.331Z | 2026-04-28T16:13:29.505Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2021-avi-823 | Vulnérabilité dans les produits Belden | 2021-10-26T00:00:00.000000 | 2021-10-26T00:00:00.000000 |
| certfr-2021-avi-822 | Vulnérabilité dans les produits ESET | 2021-10-26T00:00:00.000000 | 2021-10-26T00:00:00.000000 |
| certfr-2021-avi-821 | Multiples vulnérabilités dans les produits Nextcloud | 2021-10-26T00:00:00.000000 | 2021-10-26T00:00:00.000000 |
| certfr-2021-avi-820 | Multiples vulnérabilités dans Juniper Junos OS et Junos OS Evolved | 2021-10-26T00:00:00.000000 | 2021-10-26T00:00:00.000000 |
| certfr-2021-avi-819 | Multiples vulnérabilités dans les produits Nextcloud | 2021-10-25T00:00:00.000000 | 2021-10-25T00:00:00.000000 |
| certfr-2021-avi-815 | Vulnérabilité dans PHP | 2021-10-22T00:00:00.000000 | 2021-10-25T00:00:00.000000 |
| certfr-2021-avi-818 | Vulnérabilité dans Pulse Connect Secure | 2021-10-22T00:00:00.000000 | 2021-10-22T00:00:00.000000 |
| certfr-2021-avi-817 | Multiples vulnérabilités dans Microsoft Edge | 2021-10-22T00:00:00.000000 | 2021-10-22T00:00:00.000000 |
| certfr-2021-avi-816 | Vulnérabilité dans les produits QNAP | 2021-10-22T00:00:00.000000 | 2021-10-22T00:00:00.000000 |
| certfr-2021-avi-814 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2021-10-22T00:00:00.000000 | 2021-10-22T00:00:00.000000 |
| certfr-2021-avi-813 | Multiples vulnérabilités dans Google Chrome OS | 2021-10-21T00:00:00.000000 | 2021-10-21T00:00:00.000000 |
| certfr-2021-avi-812 | Vulnérabilité dans les produits IBM | 2021-10-21T00:00:00.000000 | 2021-10-21T00:00:00.000000 |
| certfr-2021-avi-811 | Multiples vulnérabilités dans les produits SolarWinds | 2021-10-21T00:00:00.000000 | 2021-10-21T00:00:00.000000 |
| certfr-2021-avi-810 | Vulnérabilité dans les produits ESET | 2021-10-21T00:00:00.000000 | 2021-10-21T00:00:00.000000 |
| certfr-2021-avi-809 | Vulnérabilité dans Cisco IOS XE SD-WAN | 2021-10-21T00:00:00.000000 | 2021-10-21T00:00:00.000000 |
| certfr-2021-avi-808 | Multiples vulnérabilités dans Google Chrome | 2021-10-21T00:00:00.000000 | 2021-10-21T00:00:00.000000 |
| certfr-2021-avi-807 | Vulnérabilité dans VMware vRealize Operations | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-806 | Multiples vulnérabilités dans Oracle Virtualization | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-805 | Multiples vulnérabilités dans les produits Oracle Systems | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-804 | Multiples vulnérabilités dans Oracle PeopleSoft | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-803 | Multiples vulnérabilités dans Oracle Java SE | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-802 | Multiples vulnérabilités dans Oracle Database | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-801 | Multiples vulnérabilités dans Oracle MySQL | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-800 | Multiples vulnérabilités dans Tenable.sc | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-799 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-798 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-797 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-10-20T00:00:00.000000 | 2021-10-20T00:00:00.000000 |
| certfr-2021-avi-796 | Multiples vulnérabilités dans Mozilla Thunderbird | 2021-10-19T00:00:00.000000 | 2021-10-19T00:00:00.000000 |
| certfr-2021-avi-795 | Vulnérabilité dans NetApp Clustered Data ONTAP | 2021-10-19T00:00:00.000000 | 2021-10-19T00:00:00.000000 |
| certfr-2021-avi-794 | Vulnérabilité dans Check Point Mobile Access Portal Agent | 2021-10-18T00:00:00.000000 | 2021-10-18T00:00:00.000000 |