Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-32602 | 7.1 (v3.1) | WordPress WooMS Plugin <= 9.12 - Reflected Cross Site … |
wpcraft |
WooMS |
2025-04-17T15:47:20.398Z | 2026-04-28T16:12:25.110Z |
| cve-2025-32595 | 8.1 (v3.1) | WordPress Krowd theme < 1.5.0 - Local File Inclusion v… |
gavias |
Krowd |
2025-06-09T15:54:16.735Z | 2026-04-28T16:12:25.088Z |
| cve-2025-32593 | 8.2 (v3.1) | WordPress Add Product Frontend for WooCommerce plugin … |
Bytes Technolab |
Add Product Frontend for WooCommerce |
2025-04-17T15:47:22.138Z | 2026-04-28T16:12:25.053Z |
| cve-2025-32594 | 7.5 (v3.1) | WordPress Simple WP Events plugin <= 1.8.17 - Sensitiv… |
WPMinds |
Simple WP Events |
2025-04-17T15:47:21.556Z | 2026-04-28T16:12:25.035Z |
| cve-2025-32592 | 7.1 (v3.1) | WordPress TableOn Plugin <= 1.0.3 - Cross Site Scripti… |
RealMag777 |
TableOn |
2025-04-17T15:47:22.712Z | 2026-04-28T16:12:25.015Z |
| cve-2025-32591 | 7.1 (v3.1) | WordPress WP Abstracts Plugin <= 2.7.5 - CSRF to Store… |
Kevon Adonis |
WP Abstracts |
2025-04-09T16:09:30.957Z | 2026-04-28T16:12:25.006Z |
| cve-2025-32590 | 7.1 (v3.1) | WordPress Web2application Plugin <= 6.1 - Reflected Cr… |
tzin111 |
Web2application |
2025-04-17T15:47:23.371Z | 2026-04-28T16:12:24.970Z |
| cve-2025-32589 | 8.1 (v3.1) | WordPress Flexi – Guest Submit Plugin <= 4.28 - Local … |
odude |
Flexi – Guest Submit |
2025-04-11T08:42:58.606Z | 2026-04-28T16:12:24.963Z |
| cve-2025-32588 | 7.1 (v3.1) | WordPress Credova_Financial plugin <= 2.4.8 - Reflecte… |
Credova Financial |
Credova_Financial |
2025-04-17T15:47:23.961Z | 2026-04-28T16:12:24.934Z |
| cve-2025-32587 | 8.1 (v3.1) | WordPress WooCommerce Pickupp plugin <= 2.4.3 - Local … |
pickupp |
WooCommerce Pickupp |
2025-04-11T08:42:58.410Z | 2026-04-28T16:12:24.924Z |
| cve-2025-32585 | 7.5 (v3.1) | WordPress Shop Products Filter Plugin <= 1.2 - Local F… |
Trusty Plugins |
Shop Products Filter |
2025-04-11T08:42:57.793Z | 2026-04-28T16:12:24.903Z |
| cve-2025-32583 | 9.9 (v3.1) | WordPress PDF 2 Post Plugin <= 2.4.0 - Remote Code Exe… |
termel |
PDF 2 Post |
2025-04-17T15:47:24.575Z | 2026-04-28T16:12:24.837Z |
| cve-2025-32586 | 7.1 (v3.1) | WordPress ABA PayWay Payment Gateway for WooCommerce P… |
ABA Bank |
ABA PayWay Payment Gateway for WooCommerce |
2025-04-11T08:42:58.141Z | 2026-04-28T16:12:24.750Z |
| cve-2025-32584 | 7.1 (v3.1) | WordPress Chat2 plugin <= 4.0 - CSRF to Stored XSS vul… |
Chat2 |
Chat2 |
2025-04-09T16:09:31.680Z | 2026-04-28T16:12:24.721Z |
| cve-2025-32577 | 9.8 (v3.1) | WordPress Build App Online Plugin <= 1.0.23 - Local Fi… |
hakeemnala |
Build App Online |
2025-04-11T08:42:57.280Z | 2026-04-28T16:12:24.627Z |
| cve-2025-32582 | 7.1 (v3.1) | WordPress WP AutoKeyword Plugin <= 1.0 - Cross Site Sc… |
EXEIdeas International |
WP AutoKeyword |
2025-04-17T15:47:25.163Z | 2026-04-28T16:12:24.608Z |
| cve-2025-32566 | 7.1 (v3.1) | WordPress License For Envato Plugin <= 1.0.0 - Reflect… |
Ashraful Sarkar Naiem |
License For Envato |
2025-04-17T15:47:28.218Z | 2026-04-28T16:12:24.518Z |
| cve-2025-32580 | 7.1 (v3.1) | WordPress DeBounce Email Validator plugin <= 5.7.1 - C… |
debounce |
DeBounce Email Validator |
2025-04-09T16:09:33.152Z | 2026-04-28T16:12:24.450Z |
| cve-2025-32581 | 7.1 (v3.1) | WordPress WordPress Spam Blocker Plugin <= 2.0.5 - CSR… |
Ankit Singla |
WordPress Spam Blocker |
2025-04-09T16:09:32.300Z | 2026-04-28T16:12:24.443Z |
| cve-2025-32573 | 8.5 (v3.1) | WordPress KiotViet Sync Plugin <= 1.8.3 - SQL Injectio… |
Kiotviet |
KiotViet Sync |
2025-04-17T15:47:26.367Z | 2026-04-28T16:12:24.423Z |
| cve-2025-32572 | 9.8 (v3.1) | WordPress Kata Plus Plugin <= 1.5.3 - PHP Object Injec… |
Climax Themes |
Kata Plus |
2025-04-17T15:47:26.992Z | 2026-04-28T16:12:24.409Z |
| cve-2025-32569 | 9.8 (v3.1) | WordPress TableOn plugin <= 1.0.4.3 - PHP Object Injec… |
RealMag777 |
TableOn |
2025-04-11T08:42:57.099Z | 2026-04-28T16:12:24.380Z |
| cve-2025-32575 | 7.1 (v3.1) | WordPress WP w3all phpBB Plugin <= 2.9.9 - CSRF to Sto… |
axew3 |
WP w3all phpBB |
2025-04-09T16:09:34.630Z | 2026-04-28T16:12:24.376Z |
| cve-2025-32567 | 8.5 (v3.1) | WordPress Easy Post Duplicator Plugin <= 1.0.1 - SQL I… |
dev02ali |
Easy Post Duplicator |
2025-04-11T08:42:56.709Z | 2026-04-28T16:12:24.375Z |
| cve-2025-32579 | 9.9 (v3.1) | WordPress Sync Posts Plugin <= 1.0 - Arbitrary File Up… |
SoftClever Limited |
Sync Posts |
2025-04-11T08:42:57.452Z | 2026-04-28T16:12:24.369Z |
| cve-2025-32576 | 9.6 (v3.1) | WordPress WP shop plugin <= 2.6.1 - CSRF to Arbitrary … |
Agence web Eoxia - Montpellier |
WP shop |
2025-04-09T16:09:33.954Z | 2026-04-28T16:12:24.337Z |
| cve-2025-32568 | 9.8 (v3.1) | WordPress EmpikPlace for Woocommerce Plugin <= 1.4.3 -… |
empik |
EmpikPlace for Woocommerce |
2025-04-11T08:42:56.940Z | 2026-04-28T16:12:24.337Z |
| cve-2025-32570 | 7.1 (v3.1) | WordPress ChillPay WooCommerce Plugin <= 2.5.3 - CSRF … |
ChillPay |
ChillPay WooCommerce |
2025-04-09T16:09:35.212Z | 2026-04-28T16:12:24.334Z |
| cve-2025-32578 | 7.1 (v3.1) | WordPress Coming Soon Countdown Plugin <= 2.2 - Reflec… |
Mapro Collins |
Coming Soon Countdown |
2025-04-17T15:47:25.782Z | 2026-04-28T16:12:24.332Z |
| cve-2025-32574 | 8.5 (v3.1) | WordPress WPGYM plugin <= 65.0 - SQL Injection vulnerability |
mojoomla |
WPGYM |
2025-07-16T11:28:04.716Z | 2026-04-28T16:12:24.332Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2017-avi-458 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-12-11T00:00:00.000000 | 2017-12-13T00:00:00.000000 |
| certfr-2017-avi-460 | Multiples vulnérabilités dans Xen | 2017-12-12T00:00:00.000000 | 2017-12-12T00:00:00.000000 |
| certfr-2017-avi-459 | Multiples vulnérabilités dans les produits Fortinet | 2017-12-11T00:00:00.000000 | 2017-12-11T00:00:00.000000 |
| certfr-2017-avi-457 | Multiples vulnérabilités dans SCADA Schneider Electric EcoStruxure Substation Operation | 2017-12-11T00:00:00.000000 | 2017-12-11T00:00:00.000000 |
| certfr-2017-avi-456 | Multiples vulnérabilités dans Microsoft Malware Protection Engine | 2017-12-08T00:00:00.000000 | 2017-12-08T00:00:00.000000 |
| certfr-2017-avi-455 | Multiples vulnérabilités dans Mozilla Firefox | 2017-12-08T00:00:00.000000 | 2017-12-08T00:00:00.000000 |
| certfr-2017-avi-454 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2017-12-08T00:00:00.000000 | 2017-12-08T00:00:00.000000 |
| certfr-2017-avi-453 | Vulnérabilité dans Fortinet FortiClient | 2017-12-08T00:00:00.000000 | 2017-12-08T00:00:00.000000 |
| certfr-2017-avi-452 | Multiples vulnérabilités dans OpenSSL | 2017-12-08T00:00:00.000000 | 2017-12-08T00:00:00.000000 |
| certfr-2017-avi-451 | Multiples vulnérabilités dans les produits Apple | 2017-12-07T00:00:00.000000 | 2017-12-07T00:00:00.000000 |
| certfr-2017-avi-450 | Multiples vulnérabilités dans Google Chrome | 2017-12-07T00:00:00.000000 | 2017-12-07T00:00:00.000000 |
| certfr-2017-avi-448 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-12-05T00:00:00.000000 | 2017-12-07T00:00:00.000000 |
| certfr-2017-avi-449 | Multiples vulnérabilités dans Google Android | 2017-12-05T00:00:00.000000 | 2017-12-05T00:00:00.000000 |
| certfr-2017-avi-447 | Multiples vulnérabilités dans SCADA Schneider Electric Pelco VideoXpert Enterprise | 2017-12-05T00:00:00.000000 | 2017-12-05T00:00:00.000000 |
| certfr-2017-avi-446 | Multiples vulnérabilités dans Mozilla Firefox | 2017-12-05T00:00:00.000000 | 2017-12-05T00:00:00.000000 |
| certfr-2017-avi-445 | Multiples vulnérabilités dans Apache Struts 2 | 2017-12-05T00:00:00.000000 | 2017-12-05T00:00:00.000000 |
| certfr-2017-avi-444 | Multiples vulnérabilités dans Citrix XenServer | 2017-12-04T00:00:00.000000 | 2017-12-04T00:00:00.000000 |
| certfr-2017-avi-443 | Vulnérabilité dans Asterisk | 2017-12-04T00:00:00.000000 | 2017-12-04T00:00:00.000000 |
| certfr-2017-avi-442 | Multiples vulnérabilités dans Wireshark | 2017-12-01T00:00:00.000000 | 2017-12-01T00:00:00.000000 |
| certfr-2017-avi-441 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-12-01T00:00:00.000000 | 2017-12-01T00:00:00.000000 |
| certfr-2017-avi-440 | Vulnérabilité dans le noyau Linux de RedHat | 2017-12-01T00:00:00.000000 | 2017-12-01T00:00:00.000000 |
| certfr-2017-avi-439 | Multiples vulnérabilités dans PHP | 2017-12-01T00:00:00.000000 | 2017-12-01T00:00:00.000000 |
| certfr-2017-avi-432 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2017-11-27T00:00:00.000000 | 2017-12-01T00:00:00.000000 |
| certfr-2017-avi-438 | Multiples vulnérabilités dans WordPress | 2017-11-30T00:00:00.000000 | 2017-11-30T00:00:00.000000 |
| certfr-2017-avi-437 | Multiples vulnérabilités dans SCADA Siemens SWT3000 | 2017-11-30T00:00:00.000000 | 2017-11-30T00:00:00.000000 |
| certfr-2017-avi-436 | Multiples vulnérabilités dans Cisco WebEx Network Recording Player | 2017-11-30T00:00:00.000000 | 2017-11-30T00:00:00.000000 |
| certfr-2017-avi-435 | Vulnérabilité dans Apple macOS High Sierra | 2017-11-30T00:00:00.000000 | 2017-11-30T00:00:00.000000 |
| certfr-2017-avi-434 | Multiples vulnérabilités dans Magento | 2017-11-29T00:00:00.000000 | 2017-11-29T00:00:00.000000 |
| certfr-2017-avi-433 | Multiples vulnérabilités dans Xen | 2017-11-28T00:00:00.000000 | 2017-11-28T00:00:00.000000 |
| certfr-2017-avi-430 | Vulnérabilité dans Cisco Unified Computing System Manager et Firepower 9000 | 2017-11-28T00:00:00.000000 | 2017-11-28T00:00:00.000000 |