Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-48244 | 5.9 (v3.1) | WordPress Exclusive Addons Elementor plugin <= 2.7.9 -… |
Tim Strifler |
Exclusive Addons Elementor |
2025-05-19T14:44:54.508Z | 2026-04-28T16:12:53.680Z |
| cve-2025-48231 | 6.5 (v3.1) | WordPress Booking Calendar Contact Form plugin <= 1.2.… |
codepeople |
Booking Calendar Contact Form |
2025-07-04T11:18:02.980Z | 2026-04-28T16:12:53.652Z |
| cve-2025-48243 | 4.3 (v3.1) | WordPress reCAPTCHA for all plugin <= 2.26 - Cross Sit… |
sminozzi |
reCAPTCHA for all |
2025-05-19T14:44:54.055Z | 2026-04-28T16:12:53.644Z |
| cve-2025-48233 | 7.1 (v3.1) | WordPress Affiliates Manager Google reCAPTCHA Integrat… |
affmngr |
Affiliates Manager Google reCAPTCHA Integration |
2025-05-19T14:44:49.825Z | 2026-04-28T16:12:53.629Z |
| cve-2025-48242 | 6.5 (v3.1) | WordPress Legal Pages plugin <= 1.4.5 - Broken Access … |
wpWax |
Legal Pages |
2025-05-19T14:44:53.592Z | 2026-04-28T16:12:53.628Z |
| cve-2025-48235 | 6.5 (v3.1) | WordPress WP Image Mask plugin <= 3.1.2 - Cross Site S… |
Bogdan Bendziukov |
WP Image Mask |
2025-05-19T14:44:50.802Z | 2026-04-28T16:12:53.628Z |
| cve-2025-48240 | 6.5 (v3.1) | WordPress Cost of Goods for WooCommerce plugin <= 3.7.… |
WPFactory |
Cost of Goods for WooCommerce |
2025-05-19T14:44:53.148Z | 2026-04-28T16:12:53.602Z |
| cve-2025-48236 | 8.5 (v3.1) | WordPress bunny.net plugin <= 2.3.0 - Cross Site Scrip… |
bunny.net |
bunny.net |
2025-05-19T14:44:51.265Z | 2026-04-28T16:12:53.477Z |
| cve-2025-48239 | 6.5 (v3.1) | WordPress Product Notes Tab & Private Admin Notes for … |
WPFactory |
Product Notes Tab & Private Admin Notes for WooCommerce |
2025-05-19T14:44:52.687Z | 2026-04-28T16:12:53.439Z |
| cve-2025-48237 | 6.5 (v3.1) | WordPress Wishlist for WooCommerce plugin <= 3.2.2 - C… |
WPFactory |
Wishlist for WooCommerce |
2025-05-19T14:44:51.776Z | 2026-04-28T16:12:53.418Z |
| cve-2025-48238 | 7.1 (v3.1) | WordPress AWcode Toolkit plugin <= 1.0.18 - Cross Site… |
awcode |
AWcode Toolkit |
2025-05-19T14:44:52.236Z | 2026-04-28T16:12:53.373Z |
| cve-2025-48232 | 6.5 (v3.1) | WordPress Xpro Addons For Beaver Builder – Lite plugin… |
Xpro |
Xpro Addons For Beaver Builder – Lite |
2025-05-19T14:44:49.304Z | 2026-04-28T16:12:53.372Z |
| cve-2025-48234 | 6.5 (v3.1) | WordPress Ultimate Blocks plugin <= 3.3.0 - Cross Site… |
Ultimate Blocks |
Ultimate Blocks |
2025-05-19T14:44:50.310Z | 2026-04-28T16:12:53.355Z |
| cve-2025-48170 | 7.1 (v3.1) | WordPress Universal Video Player - Addon for WPBakery … |
LambertGroup |
Universal Video Player - Addon for WPBakery Page Builder |
2025-08-20T08:03:26.142Z | 2026-04-28T16:12:53.349Z |
| cve-2025-48166 | 5.3 (v3.1) | WordPress Stop and Block bots plugin Anti bots <= 1.48… |
sminozzi |
Stop and Block bots plugin Anti bots |
2025-07-16T10:36:55.741Z | 2026-04-28T16:12:53.348Z |
| cve-2025-48168 | 7.1 (v3.1) | WordPress Apollo - Sticky Full Width HTML5 Audio Playe… |
LambertGroup |
Apollo - Sticky Full Width HTML5 Audio Player |
2025-08-20T08:03:27.240Z | 2026-04-28T16:12:53.344Z |
| cve-2025-48163 | 7.1 (v3.1) | WordPress SHOUT - HTML5 Radio Player With Ads - ShoutC… |
LambertGroup |
SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support |
2025-08-20T08:03:28.903Z | 2026-04-28T16:12:53.322Z |
| cve-2025-48167 | 5.4 (v3.1) | WordPress Chatbox Manager plugin <= 1.2.5 - Broken Acc… |
alexvtn |
Chatbox Manager |
2025-07-16T10:36:55.259Z | 2026-04-28T16:12:53.306Z |
| cve-2025-48164 | 8.8 (v3.1) | WordPress SureDash <= 1.0.3 - Privilege Escalation Vul… |
Brainstorm Force |
SureDash |
2025-08-20T08:03:28.341Z | 2026-04-28T16:12:53.208Z |
| cve-2025-48171 | 8.1 (v3.1) | WordPress Cena Store <= 2.11.26 - Local File Inclusion… |
thembay |
Cena Store |
2025-08-20T08:03:25.615Z | 2026-04-28T16:12:53.172Z |
| cve-2025-48162 | 7.1 (v3.1) | WordPress Simple Business Directory Pro <= 15.5.1 - Cr… |
quantumcloud |
Simple Business Directory Pro |
2025-08-20T08:03:29.447Z | 2026-04-28T16:12:53.172Z |
| cve-2025-48169 | 9.9 (v3.1) | WordPress Code Engine Plugin <= 0.3.3 - Remote Code Ex… |
Jordy Meow |
Code Engine |
2025-08-20T08:03:26.706Z | 2026-04-28T16:12:53.144Z |
| cve-2025-48165 | 8.8 (v3.1) | WordPress DELUCKS SEO Plugin <= 2.6.0 - Privilege Esca… |
DELUCKS |
DELUCKS SEO |
2025-08-20T08:03:27.796Z | 2026-04-28T16:12:53.141Z |
| cve-2025-48161 | 7.6 (v3.1) | WordPress YaySMTP plugin <= 1.3 - SQL Injection Vulner… |
YayCommerce |
YaySMTP |
2025-07-16T10:36:56.225Z | 2026-04-28T16:12:53.016Z |
| cve-2025-48158 | 8.6 (v3.1) | WordPress BuddyPress XProfile Custom Image Field Plugi… |
Alex Githatu |
BuddyPress XProfile Custom Image Field |
2025-08-20T08:03:31.014Z | 2026-04-28T16:12:52.960Z |
| cve-2025-48160 | 8.1 (v3.1) | WordPress Caliris <= 1.5 - Local File Inclusion Vulner… |
CocoBasic |
Caliris |
2025-08-20T08:03:29.955Z | 2026-04-28T16:12:52.878Z |
| cve-2025-48159 | 7.1 (v3.1) | WordPress Youtube Vimeo Video Player and Slider WP Plu… |
LambertGroup |
Youtube Vimeo Video Player and Slider WP Plugin |
2025-08-20T08:03:30.498Z | 2026-04-28T16:12:52.861Z |
| cve-2025-48157 | 8.1 (v3.1) | WordPress Formality <= 1.5.9 - Local File Inclusion Vu… |
Michele Giorgi |
Formality |
2025-08-20T08:03:31.534Z | 2026-04-28T16:12:52.851Z |
| cve-2025-48154 | 7.1 (v3.1) | WordPress Multimedia Playlist Slider Addon for WPBaker… |
LambertGroup |
Multimedia Playlist Slider Addon for WPBakery Page Builder |
2025-08-20T08:03:32.088Z | 2026-04-28T16:12:52.847Z |
| cve-2025-48156 | 6.5 (v3.1) | WordPress Image Wall plugin <= 3.1 - Cross Site Script… |
Parakoos |
Image Wall |
2025-07-16T10:36:56.689Z | 2026-04-28T16:12:52.836Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2020-avi-292 | Multiples vulnérabilités dans PHP | 2020-05-14T00:00:00.000000 | 2020-05-14T00:00:00.000000 |
| certfr-2020-avi-291 | Vulnérabilité dans Symantec IT Analytics | 2020-05-14T00:00:00.000000 | 2020-05-14T00:00:00.000000 |
| certfr-2020-avi-289 | Multiples vulnérabilités dans les produits Microsoft | 2020-05-13T00:00:00.000000 | 2020-05-13T00:00:00.000000 |
| certfr-2020-avi-288 | Multiples vulnérabilités dans Microsoft .Net | 2020-05-13T00:00:00.000000 | 2020-05-13T00:00:00.000000 |
| certfr-2020-avi-287 | Multiples vulnérabilités dans Microsoft Windows | 2020-05-13T00:00:00.000000 | 2020-05-13T00:00:00.000000 |
| certfr-2020-avi-286 | Multiples vulnérabilités dans Microsoft Office | 2020-05-13T00:00:00.000000 | 2020-05-13T00:00:00.000000 |
| certfr-2020-avi-285 | Multiples vulnérabilités dans Microsoft Edge | 2020-05-13T00:00:00.000000 | 2020-05-13T00:00:00.000000 |
| certfr-2020-avi-284 | Multiples vulnérabilités dans Microsoft IE | 2020-05-13T00:00:00.000000 | 2020-05-13T00:00:00.000000 |
| certfr-2020-avi-283 | Multiples vulnérabilités dans les produits SAP | 2020-05-13T00:00:00.000000 | 2020-05-13T00:00:00.000000 |
| certfr-2020-avi-282 | Multiples vulnérabilités dans Adobe Reader et Acrobat | 2020-05-13T00:00:00.000000 | 2020-05-13T00:00:00.000000 |
| certfr-2020-avi-281 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2020-05-13T00:00:00.000000 | 2020-05-13T00:00:00.000000 |
| certfr-2020-avi-280 | Multiples vulnérabilités dans les produits Schneider Electric | 2020-05-13T00:00:00.000000 | 2020-05-13T00:00:00.000000 |
| certfr-2020-avi-279 | Vulnérabilité dans Palo Alto PAN-OS | 2020-05-13T00:00:00.000000 | 2020-05-13T00:00:00.000000 |
| certfr-2020-avi-278 | Multiples vulnérabilités dans les produits Symantec | 2020-05-13T00:00:00.000000 | 2020-05-13T00:00:00.000000 |
| certfr-2020-avi-277 | Multiples vulnérabilités dans Siemens Power Meters | 2020-05-12T00:00:00.000000 | 2020-05-12T00:00:00.000000 |
| certfr-2020-avi-276 | Multiples vulnérabilités dans Symantec Endpoint Protection | 2020-05-12T00:00:00.000000 | 2020-05-12T00:00:00.000000 |
| certfr-2020-avi-275 | Vulnérabilité dans Ruby on Rails | 2020-05-07T00:00:00.000000 | 2020-05-07T00:00:00.000000 |
| certfr-2020-avi-274 | Multiples vulnérabilités dans les produits Cisco | 2020-05-07T00:00:00.000000 | 2020-05-07T00:00:00.000000 |
| certfr-2020-avi-273 | Multiples vulnérabilités dans VideoLAN VLC | 2020-05-06T00:00:00.000000 | 2020-05-06T00:00:00.000000 |
| certfr-2020-avi-272 | Vulnérabilité dans les produits Foxit pour macOS | 2020-05-06T00:00:00.000000 | 2020-05-06T00:00:00.000000 |
| certfr-2020-avi-271 | Multiples vulnérabilités dans WordPress | 2020-05-06T00:00:00.000000 | 2020-05-06T00:00:00.000000 |
| certfr-2020-avi-270 | Vulnérabilité dans Ruby on Rails | 2020-05-06T00:00:00.000000 | 2020-05-06T00:00:00.000000 |
| certfr-2020-avi-269 | Multiples vulnérabilités dans Google Chrome | 2020-05-06T00:00:00.000000 | 2020-05-06T00:00:00.000000 |
| certfr-2020-avi-268 | Multiples vulnérabilités dans Mozilla Thunderbird | 2020-05-06T00:00:00.000000 | 2020-05-06T00:00:00.000000 |
| certfr-2020-avi-267 | Multiples vulnérabilités dans Citrix ShareFile | 2020-05-05T00:00:00.000000 | 2020-05-05T00:00:00.000000 |
| certfr-2020-avi-266 | Multiples vulnérabilités dans Mozilla Firefox | 2020-05-05T00:00:00.000000 | 2020-05-05T00:00:00.000000 |
| certfr-2020-avi-265 | Vulnérabilité dans Zimbra | 2020-05-05T00:00:00.000000 | 2020-05-05T00:00:00.000000 |
| certfr-2020-avi-264 | Multiples vulnérabilités dans Google Android | 2020-05-05T00:00:00.000000 | 2020-05-05T00:00:00.000000 |
| certfr-2020-avi-263 | Multiples vulnérabilités dans SaltStack | 2020-05-04T00:00:00.000000 | 2020-05-04T00:00:00.000000 |
| certfr-2020-avi-262 | Vulnérabilité dans F5 BIG-IP | 2020-05-04T00:00:00.000000 | 2020-05-04T00:00:00.000000 |