Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-46233 | 6.5 (v3.1) | WordPress Sirv plugin <= 7.5.3 - Cross Site Scripting … |
Sirv CDN and Image Hosting |
Sirv |
2025-04-22T09:53:23.959Z | 2026-04-28T16:12:36.771Z |
| cve-2025-46238 | 6.5 (v3.1) | WordPress List Last Changes plugin <= 1.2.1 - Cross Si… |
rbaer |
List Last Changes |
2025-04-22T09:53:26.476Z | 2026-04-28T16:12:36.761Z |
| cve-2025-46237 | 6.5 (v3.1) | WordPress Link Library plugin <= 7.8 - Cross Site Scri… |
Yannick Lefebvre |
Link Library |
2025-04-22T09:53:25.888Z | 2026-04-28T16:12:36.753Z |
| cve-2025-46235 | 6.5 (v3.1) | WordPress SKT Blocks – Gutenberg based Page Builder pl… |
sonalsinha21 |
SKT Blocks |
2025-04-22T09:53:24.616Z | 2026-04-28T16:12:36.748Z |
| cve-2025-46236 | 6.5 (v3.1) | WordPress HTML Forms plugin <= 1.5.2 - Cross Site Scri… |
Link Software LLC |
HTML Forms |
2025-04-22T09:53:25.263Z | 2026-04-28T16:12:36.726Z |
| cve-2025-46234 | 7.1 (v3.1) | WordPress Control Listings plugin <= 1.0.4.1 - Reflect… |
Habibur Rahman Razib |
Control Listings |
2025-04-24T16:08:29.212Z | 2026-04-28T16:12:36.722Z |
| cve-2025-46232 | 4.3 (v3.1) | WordPress Download Alt Text AI plugin <= 1.9.93 - Brok… |
alttextai |
Download Alt Text AI |
2025-04-22T09:53:23.356Z | 2026-04-28T16:12:36.699Z |
| cve-2025-46231 | 5.4 (v3.1) | WordPress affiliate-toolkit plugin <= 3.7.3 - Cross Si… |
SERVIT Software Solutions |
affiliate-toolkit |
2025-04-22T09:53:22.691Z | 2026-04-28T16:12:36.655Z |
| cve-2025-4414 | 8.1 (v3.1) | WordPress CMSMasters Content Composer plugin < 2.5.7 -… |
cmsmasters |
CMSMasters Content Composer |
2025-07-04T11:17:50.701Z | 2026-04-28T16:12:36.640Z |
| cve-2025-46230 | 7.5 (v3.1) | WordPress Popup Builder plugin <= 1.1.35 - Local File … |
GhozyLab |
Popup Builder |
2025-04-24T16:08:29.765Z | 2026-04-28T16:12:36.536Z |
| cve-2025-46229 | 5.9 (v3.1) | WordPress Textmetrics plugin <= 3.6.2 - Cross Site Scr… |
Israpil |
Textmetrics |
2025-04-22T09:53:22.034Z | 2026-04-28T16:12:36.531Z |
| cve-2025-46228 | 6.5 (v3.1) | WordPress Event post plugin <= 5.9.11 - Cross Site Scr… |
Bastien Ho |
Event post |
2025-04-22T09:53:21.279Z | 2026-04-28T16:12:36.531Z |
| cve-2025-46227 | 6.5 (v3.1) | WordPress Custom Related Posts plugin <= 1.7.4 - Cross… |
Brecht |
Custom Related Posts |
2025-04-22T09:53:20.549Z | 2026-04-28T16:12:36.512Z |
| cve-2025-46225 | 6.5 (v3.1) | WordPress Post in page for Elementor plugin <= 1.0.1 -… |
Michael |
Post in page for Elementor |
2025-04-22T09:53:19.295Z | 2026-04-28T16:12:36.455Z |
| cve-2025-46226 | 6.5 (v3.1) | WordPress MPL-Publisher plugin <= 2.18.0 - Cross Site … |
ferranfg |
MPL-Publisher |
2025-04-22T09:53:19.931Z | 2026-04-28T16:12:36.451Z |
| cve-2025-43838 | 6.5 (v3.1) | WordPress Custom PC Builder Lite for WooCommerce <= 1.… |
ChoPlugins.com |
Custom PC Builder Lite for WooCommerce |
2025-05-19T18:17:37.698Z | 2026-04-28T16:12:36.401Z |
| cve-2025-43840 | 7.1 (v3.1) | WordPress CheckBot plugin <= 1.05 - CSRF to Stored XSS… |
ref |
CheckBot |
2025-05-19T17:07:20.828Z | 2026-04-28T16:12:36.340Z |
| cve-2025-43839 | 7.1 (v3.1) | WordPress BP Messages Tool plugin <= 2.2 - Reflected C… |
shanebp |
BP Messages Tool |
2025-05-19T18:16:27.051Z | 2026-04-28T16:12:36.319Z |
| cve-2025-43841 | 6.5 (v3.1) | WordPress WP Vegas plugin <= 2.2 - Cross Site Scriptin… |
jamesdbruner |
WP Vegas |
2025-05-19T17:08:41.224Z | 2026-04-28T16:12:36.283Z |
| cve-2025-43834 | 5.9 (v3.1) | WordPress cookieBAR plugin <= 1.7.0 - Cross Site Scrip… |
tox82 |
cookieBAR |
2025-05-19T17:27:44.348Z | 2026-04-28T16:12:36.283Z |
| cve-2025-43836 | 7.1 (v3.1) | WordPress Syndicate Out <= 0.9 - Cross Site Scripting … |
confuzzledduck |
Syndicate Out |
2025-05-19T18:22:02.030Z | 2026-04-28T16:12:36.196Z |
| cve-2025-39596 | 9.8 (v3.1) | WordPress Quentn WP plugin <= 1.2.8 - Privilege Escala… |
Quentn.com GmbH |
Quentn WP |
2025-04-17T15:46:41.592Z | 2026-04-28T16:12:36.100Z |
| cve-2025-39593 | 4.3 (v3.1) | WordPress Ever Accounting plugin <= 2.1.5 - Cross Site… |
EverAccounting |
Ever Accounting |
2025-04-16T12:44:19.155Z | 2026-04-28T16:12:35.936Z |
| cve-2025-43832 | 7.1 (v3.1) | WordPress Remote Images Grabber plugin <= 0.6 - Reflec… |
andreyk |
Remote Images Grabber |
2025-05-19T18:45:14.076Z | 2026-04-28T16:12:35.929Z |
| cve-2025-43837 | 7.1 (v3.1) | WordPress Total Donations <= 3.0.8 - Cross Site Script… |
binti76 |
Total Donations |
2025-05-19T18:20:33.700Z | 2026-04-28T16:12:35.923Z |
| cve-2025-39599 | 4.7 (v3.1) | WordPress Listdom plugin <= 4.0.0 - Open Redirection V… |
Webilia Inc. |
Listdom |
2025-04-16T12:44:16.869Z | 2026-04-28T16:12:35.922Z |
| cve-2025-43833 | 7.6 (v3.1) | WordPress Absolute Links plugin <= 1.1.1 - SQL Injecti… |
Amir Helzer |
Absolute Links |
2025-05-19T17:29:57.245Z | 2026-04-28T16:12:35.907Z |
| cve-2025-43835 | 4.3 (v3.1) | WordPress wp-cyr-cho plugin <= 0.1 - Cross Site Reques… |
ktsvetkov |
wp-cyr-cho |
2025-05-19T17:26:45.474Z | 2026-04-28T16:12:35.895Z |
| cve-2025-39601 | 9.6 (v3.1) | WordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF … |
WPFactory |
Custom CSS, JS & PHP |
2025-04-16T12:44:15.534Z | 2026-04-28T16:12:35.853Z |
| cve-2025-39600 | 4.3 (v3.1) | WordPress Integration for WooCommerce and QuickBooks p… |
CRM Perks |
Integration for WooCommerce and QuickBooks |
2025-04-16T12:44:16.285Z | 2026-04-28T16:12:35.782Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-516 | Vulnérabilité dans F5 BIG-IP | 2018-10-26T00:00:00.000000 | 2018-10-26T00:00:00.000000 |
| certfr-2018-avi-515 | Multiples vulnérabilités dans HP iLO | 2018-10-25T00:00:00.000000 | 2018-10-25T00:00:00.000000 |
| certfr-2018-avi-514 | Vulnérabilité dans Xen | 2018-10-25T00:00:00.000000 | 2018-10-25T00:00:00.000000 |
| certfr-2018-avi-513 | Vulnérabilité dans Cisco Webex Meetings Desktop App | 2018-10-25T00:00:00.000000 | 2018-10-25T00:00:00.000000 |
| certfr-2018-avi-512 | Vulnérabilité dans Citrix NetScaler | 2018-10-24T00:00:00.000000 | 2018-10-24T00:00:00.000000 |
| certfr-2018-avi-511 | Vulnérabilité dans les produits Tenable | 2018-10-24T00:00:00.000000 | 2018-10-24T00:00:00.000000 |
| certfr-2018-avi-510 | Multiples vulnérabilités dans Mozilla Firefox | 2018-10-24T00:00:00.000000 | 2018-10-24T00:00:00.000000 |
| certfr-2018-avi-509 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-24T00:00:00.000000 | 2018-10-24T00:00:00.000000 |
| certfr-2018-avi-508 | Multiples vulnérabilités dans le noyau Linux de Ubuntu | 2018-10-23T00:00:00.000000 | 2018-10-23T00:00:00.000000 |
| certfr-2018-avi-507 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-23T00:00:00.000000 | 2018-10-23T00:00:00.000000 |
| certfr-2018-avi-506 | Multiples vulnérabilités dans Citrix SD-WAN | 2018-10-23T00:00:00.000000 | 2018-10-23T00:00:00.000000 |
| certfr-2018-avi-505 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-19T00:00:00.000000 | 2018-10-19T00:00:00.000000 |
| certfr-2018-avi-504 | Vulnérabilité dans Aruba BLE Radio | 2018-10-19T00:00:00.000000 | 2018-10-19T00:00:00.000000 |
| certfr-2018-avi-503 | Vulnérabilité dans Blueimp jQuery-File-Upload | 2018-10-19T00:00:00.000000 | 2018-10-19T00:00:00.000000 |
| certfr-2018-avi-502 | Multiples vulnérabilités dans les produits Cisco | 2018-10-18T00:00:00.000000 | 2018-10-18T00:00:00.000000 |
| certfr-2018-avi-501 | Multiples vulnérabilités dans Drupal | 2018-10-18T00:00:00.000000 | 2018-10-18T00:00:00.000000 |
| certfr-2018-avi-500 | Multiples vulnérabilités dans Moxa ThingsPro Gateway | 2018-10-18T00:00:00.000000 | 2018-10-18T00:00:00.000000 |
| certfr-2018-avi-490 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-17T00:00:00.000000 | 2018-10-18T00:00:00.000000 |
| certfr-2018-avi-499 | Vulnérabilité dans la bibliothèque libssh | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-498 | Multiples vulnérabilités dans Oracle MySQL | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-497 | Multiples vulnérabilités dans Oracle Virtualization | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-496 | Multiples vulnérabilités dans Oracle Sun Systems | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-495 | Multiples vulnérabilités dans Oracle Java SE | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-494 | Multiples vulnérabilités dans Oracle Database | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-493 | Vulnérabilité dans VMware ESXi, Workstation et Fusion | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-492 | Multiples vulnérabilités dans Google Chrome | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-491 | Vulnérabilité dans Symantec Web Isolation | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-488 | Multiples vulnérabilités dans Wireshark | 2018-10-12T00:00:00.000000 | 2018-10-12T00:00:00.000000 |
| certfr-2018-avi-487 | Multiples vulnérabilités dans les produits Juniper | 2018-10-11T00:00:00.000000 | 2018-10-11T00:00:00.000000 |
| certfr-2018-avi-486 | Multiples vulnérabilités dans les produits Microsoft | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |