Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-25113 | 7.1 (v3.1) | WordPress Implied Cookie Consent plugin <= 1.3 - Refle… |
Senktec |
Implied Cookie Consent |
2025-03-03T13:30:23.619Z | 2026-04-28T16:11:35.811Z |
| cve-2025-25114 | 7.1 (v3.1) | WordPress User Role plugin <= 1.0 - Reflected Cross Si… |
ehabstar |
User Role |
2025-03-03T13:30:23.767Z | 2026-04-28T16:11:35.808Z |
| cve-2025-25112 | 7.6 (v3.1) | WordPress Social Links plugin <= 1.2 - SQL Injection v… |
kareemsultan |
Social Links |
2025-03-03T13:30:23.457Z | 2026-04-28T16:11:35.734Z |
| cve-2025-25110 | 5.4 (v3.1) | WordPress Event Kikfyre plugin <= 2.1.8 - Broken Acces… |
Metagauss |
Event Kikfyre |
2025-02-07T10:11:38.481Z | 2026-04-28T16:11:35.629Z |
| cve-2025-25111 | 5.4 (v3.1) | WordPress WP Spell Check plugin <= 9.21 - Cross Site R… |
WP Spell Check |
WP Spell Check |
2025-02-07T10:11:37.821Z | 2026-04-28T16:11:35.620Z |
| cve-2025-25105 | 5.9 (v3.1) | WordPress Pop Up Plugin <= 0.1 - Cross Site Scripting … |
coffeestudios |
Pop Up |
2025-02-07T10:11:42.221Z | 2026-04-28T16:11:35.604Z |
| cve-2025-25103 | 4.3 (v3.1) | WordPress Indeed API Plugin <= 0.5 - CSRF to Settings … |
bnielsen |
Indeed API |
2025-02-07T10:11:42.848Z | 2026-04-28T16:11:35.581Z |
| cve-2025-25109 | 8.1 (v3.1) | WordPress Vehicle Manager plugin <= 3.1 - Local File I… |
JoomSky |
WP Vehicle Manager |
2025-03-03T13:30:23.305Z | 2026-04-28T16:11:35.580Z |
| cve-2025-25094 | 6.5 (v3.1) | WordPress Breaking News Ticker plugin <= 2.4.4 - Cross… |
Amitythemes.com |
Breaking News Ticker |
2025-02-07T10:11:32.878Z | 2026-04-28T16:11:35.548Z |
| cve-2025-25108 | 7.1 (v3.1) | WordPress SW Plus Plugin <= 2.1 - Reflected Cross Site… |
shalomworld |
SW Plus |
2025-03-03T13:30:23.129Z | 2026-04-28T16:11:35.546Z |
| cve-2025-25104 | 7.1 (v3.1) | WordPress URL-Preview-Box plugin <= 1.20 - CSRF to Sto… |
mraliende |
URL-Preview-Box |
2025-02-07T10:11:36.542Z | 2026-04-28T16:11:35.535Z |
| cve-2025-25102 | 7.1 (v3.1) | WordPress Yahoo BOSS Plugin <= 0.7 - Reflected Cross S… |
Josh Harrison |
Yahoo BOSS |
2025-03-03T13:30:22.968Z | 2026-04-28T16:11:35.521Z |
| cve-2025-25107 | 9.6 (v3.1) | WordPress OneStore Sites plugin <= 0.1.1 - CSRF to Arb… |
sainwp |
OneStore Sites |
2025-02-07T10:11:40.883Z | 2026-04-28T16:11:35.518Z |
| cve-2025-25106 | 9.6 (v3.1) | WordPress Starter Templates by FancyWP plugin <= 2.0.0… |
FancyWP |
Starter Templates by FancyWP |
2025-02-07T10:11:40.281Z | 2026-04-28T16:11:35.502Z |
| cve-2025-25100 | 7.1 (v3.1) | WordPress Cazamba plugin <= 1.2 - CSRF to Reflected Cr… |
victoracano |
Cazamba |
2025-03-27T14:02:48.228Z | 2026-04-28T16:11:35.377Z |
| cve-2025-25095 | 6.5 (v3.1) | WordPress ReverbNation Widgets plugin <= 2.1 - Cross S… |
reverbnationdev |
ReverbNation Widgets |
2025-02-07T10:11:35.322Z | 2026-04-28T16:11:35.360Z |
| cve-2025-25098 | 6.5 (v3.1) | WordPress Links in Captions plugin <= 1.2 - Stored Cro… |
Zack Katz |
Links in Captions |
2025-02-07T10:11:28.421Z | 2026-04-28T16:11:35.339Z |
| cve-2025-25099 | 7.1 (v3.1) | WordPress Appointment Buddy Widget By Accrete plugin <… |
accreteinfosolution |
Appointment Buddy Widget |
2025-03-03T13:30:22.817Z | 2026-04-28T16:11:35.337Z |
| cve-2025-25093 | 6.1 (v3.1) | WordPress Child Themes Helper plugin <= 2.2.7 - CSRF … |
paulswarthout |
Child Themes Helper |
2025-02-07T10:11:35.933Z | 2026-04-28T16:11:35.335Z |
| cve-2025-25096 | 6.5 (v3.1) | WordPress RSS in Page plugin <= 2.9.1 - Stored Cross S… |
titusbicknell |
RSS in Page |
2025-02-07T10:11:34.707Z | 2026-04-28T16:11:35.319Z |
| cve-2025-25091 | 6.5 (v3.1) | WordPress NextGen Cooliris Gallery plugin <= 0.7 - Cro… |
zackdesign |
NextGen Cooliris Gallery |
2025-02-07T10:11:25.772Z | 2026-04-28T16:11:35.300Z |
| cve-2025-25101 | 9.6 (v3.1) | WordPress Munk Sites plugin <= 1.0.7 - CSRF to Arbitra… |
MetricThemes |
Munk Sites |
2025-02-07T10:11:41.579Z | 2026-04-28T16:11:35.298Z |
| cve-2025-25097 | 6.5 (v3.1) | WordPress External "Video for Everybody" plugin <= 2.1… |
kwiliarty |
External Video For Everybody |
2025-02-07T10:11:39.677Z | 2026-04-28T16:11:35.298Z |
| cve-2025-25092 | 7.1 (v3.1) | WordPress All push notification for WP plugin <= 1.5.3… |
gtlwpdev |
All push notification for WP |
2025-03-03T13:30:22.668Z | 2026-04-28T16:11:35.284Z |
| cve-2025-25090 | 7.1 (v3.1) | WordPress Dreamstime Stock Photos plugin <= 4.1 - Refl… |
dreamstime |
Dreamstime Stock Photos |
2025-03-03T13:30:22.510Z | 2026-04-28T16:11:35.280Z |
| cve-2025-25078 | 6.5 (v3.1) | WordPress Google Earth Embed plugin <= 1.0 - Cross Sit… |
Andrew Norcross |
Google Earth Embed |
2025-02-07T10:11:30.377Z | 2026-04-28T16:11:35.250Z |
| cve-2025-25089 | 7.1 (v3.1) | WordPress Image Rotator plugin <= 2.0 - Reflected Cros… |
appten |
Image Rotator |
2025-03-03T13:30:22.345Z | 2026-04-28T16:11:35.156Z |
| cve-2025-25077 | 6.5 (v3.1) | WordPress Easy Chart Builder for WordPress plugin <= 1… |
dugbug |
Easy Chart Builder for WordPress |
2025-02-07T10:11:31.579Z | 2026-04-28T16:11:35.143Z |
| cve-2025-25085 | 6.5 (v3.1) | WordPress WP SimpleWeather plugin <= 0.2.5 - Cross Sit… |
matt_mcbrien |
WP SimpleWeather |
2025-02-07T10:11:34.106Z | 2026-04-28T16:11:34.977Z |
| cve-2025-25087 | 7.1 (v3.1) | WordPress seekXL Snapr plugin <= 2.0.6 - Reflected Cro… |
Tim |
seekXL Snapr |
2025-03-03T13:30:22.176Z | 2026-04-28T16:11:34.976Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2013-avi-238 | Multiples vulnérabilités dans Cisco IOS XE | 2013-04-11T00:00:00.000000 | 2013-04-11T00:00:00.000000 |
| certa-2013-avi-237 | Multiples vulnérabilités dans Google Chrome | 2013-04-10T00:00:00.000000 | 2013-04-10T00:00:00.000000 |
| certa-2013-avi-236 | Multiples vulnérabilités dans Adobe Shockwave Player | 2013-04-10T00:00:00.000000 | 2013-04-10T00:00:00.000000 |
| certa-2013-avi-235 | Multiples vulnérabilités dans Adobe Flash Player et AIR | 2013-04-10T00:00:00.000000 | 2013-04-10T00:00:00.000000 |
| certa-2013-avi-234 | Multiples vulnérabilités dans Adobe ColdFusion | 2013-04-10T00:00:00.000000 | 2013-04-10T00:00:00.000000 |
| certa-2013-avi-233 | Multiples vulnérabilités dans Microsoft Kernel-Mode Driver | 2013-04-10T00:00:00.000000 | 2013-04-10T00:00:00.000000 |
| certa-2013-avi-232 | Vulnérabilité dans Microsoft HTML Sanitization Component | 2013-04-10T00:00:00.000000 | 2013-04-10T00:00:00.000000 |
| certa-2013-avi-231 | Vulnérabilité dans Microsoft Windows Defender | 2013-04-10T00:00:00.000000 | 2013-04-10T00:00:00.000000 |
| certa-2013-avi-230 | Vulnérabilité dans Microsoft CSRSS | 2013-04-10T00:00:00.000000 | 2013-04-10T00:00:00.000000 |
| certa-2013-avi-229 | Vulnérabilité dans Microsoft Active Directory | 2013-04-10T00:00:00.000000 | 2013-04-10T00:00:00.000000 |
| certa-2013-avi-228 | Multiples vulnérabilités dans Microsoft Windows Kernel | 2013-04-10T00:00:00.000000 | 2013-04-10T00:00:00.000000 |
| certa-2013-avi-227 | Vulnérabilité dans Microsoft SharePoint | 2013-04-10T00:00:00.000000 | 2013-04-10T00:00:00.000000 |
| certa-2013-avi-226 | Vulnérabilité dans Microsoft Remote Desktop Client | 2013-04-10T00:00:00.000000 | 2013-04-10T00:00:00.000000 |
| certa-2013-avi-225 | Multiples vulnérabilités dans Microsoft Internet Explorer | 2013-04-10T00:00:00.000000 | 2013-04-10T00:00:00.000000 |
| certa-2013-avi-224 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2013-04-09T00:00:00.000000 | 2013-04-09T00:00:00.000000 |
| certa-2013-avi-223 | Vulnérabilité dans Huawei AR | 2013-04-08T00:00:00.000000 | 2013-04-08T00:00:00.000000 |
| certa-2013-avi-222 | Vulnérabilité dans Xen | 2013-04-08T00:00:00.000000 | 2013-04-08T00:00:00.000000 |
| certa-2013-avi-221 | Multiples vulnérabilités dans PostgreSQL | 2013-04-05T00:00:00.000000 | 2013-04-05T00:00:00.000000 |
| certa-2013-avi-220 | Multiples vulnérabilités dans Opera | 2013-04-05T00:00:00.000000 | 2013-04-05T00:00:00.000000 |
| certa-2013-avi-219 | Multiples vulnérabilités dans le noyau Linux d' Ubuntu | 2013-04-04T00:00:00.000000 | 2013-04-04T00:00:00.000000 |
| certa-2013-avi-218 | Multiples vulnérabilités dans le système SCADA Wind River VxWorks | 2013-04-04T00:00:00.000000 | 2013-04-04T00:00:00.000000 |
| certa-2013-avi-217 | Vulnérabilité dans Samba | 2013-04-04T00:00:00.000000 | 2013-04-04T00:00:00.000000 |
| certa-2013-avi-216 | Vulnérabilité dans les pilotes NVIDIA | 2013-04-03T00:00:00.000000 | 2013-04-03T00:00:00.000000 |
| certa-2013-avi-215 | Multiples vulnérabilités dans les produits ESR Mozilla | 2013-04-03T00:00:00.000000 | 2013-04-03T00:00:00.000000 |
| certa-2013-avi-214 | Multiples vulnérabilités dans les produits Mozilla | 2013-04-03T00:00:00.000000 | 2013-04-03T00:00:00.000000 |
| certa-2013-avi-213 | Vulnérabilité dans IBM InfoSphere | 2013-04-02T00:00:00.000000 | 2013-04-02T00:00:00.000000 |
| certa-2013-avi-212 | Multiples vulnérabilités dans Skype | 2013-04-02T00:00:00.000000 | 2013-04-02T00:00:00.000000 |
| certa-2013-avi-211 | Multiples vulnérabilités dans ZENworks | 2013-04-02T00:00:00.000000 | 2013-04-02T00:00:00.000000 |
| certa-2013-avi-210 | Vulnérabilité dans ISC BIND | 2013-03-29T00:00:00.000000 | 2013-03-29T00:00:00.000000 |
| certa-2013-avi-209 | Vulnérabilité dans HP ProCurve | 2013-03-29T00:00:00.000000 | 2013-03-29T00:00:00.000000 |