4.9

CVSS3.1

CVE-2025-62988 - WordPress Slider Templates plugin <= 1.0.3 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery (SSRF) vulnerability in Codeless Slider Templates slider-templates allows Server Side Request Forgery.This issue affects Slider Templates: from n/a through <= 1.0.3.

πŸ“… Published: Oct. 27, 2025, 1:34 a.m. πŸ”„ Last Modified: April 1, 2026, 2:09 p.m.

6.5

CVSS3.1

CVE-2025-62987 - WordPress Builderall Builder for WordPress plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerabili…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Stored XSS.This issue affects Builderall Builder for WordPress: from n/a through <= 3.0.1.

πŸ“… Published: Oct. 27, 2025, 1:34 a.m. πŸ”„ Last Modified: April 1, 2026, 2:09 p.m.

7.1

CVSS3.1

CVE-2025-62986 - WordPress FanBridge signup plugin <= 0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in FanBridge FanBridge signup fanbridge-signup allows Stored XSS.This issue affects FanBridge signup: from n/a through <= 0.6.

πŸ“… Published: Oct. 27, 2025, 1:34 a.m. πŸ”„ Last Modified: April 1, 2026, 2:09 p.m.

6.5

CVSS3.1

CVE-2025-62985 - WordPress Simple Pull Quote plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in llamaman Simple Pull Quote simple-pull-quote allows Stored XSS.This issue affects Simple Pull Quote: from n/a through <= 1.6.3.

πŸ“… Published: Oct. 27, 2025, 1:34 a.m. πŸ”„ Last Modified: April 1, 2026, 2:09 p.m.

6.5

CVSS3.1

CVE-2025-62984 - WordPress WP AdCenter plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPeka WP AdCenter wpadcenter allows Stored XSS.This issue affects WP AdCenter: from n/a through <= 2.6.1.

πŸ“… Published: Oct. 27, 2025, 1:34 a.m. πŸ”„ Last Modified: April 1, 2026, 2:09 p.m.

6.5

CVSS3.1

CVE-2025-62983 - WordPress Posts By Tag plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sudar Muthu Posts By Tag posts-by-tag allows Stored XSS.This issue affects Posts By Tag: from n/a through <= 3.2.1.

πŸ“… Published: Oct. 27, 2025, 1:34 a.m. πŸ”„ Last Modified: April 1, 2026, 2:09 p.m.

5.4

CVSS3.1

CVE-2025-62982 - WordPress Dynamic User Directory plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Stored XSS.This issue affects Dynamic User Directory: from n/a through <= 2.3.

πŸ“… Published: Oct. 27, 2025, 1:34 a.m. πŸ”„ Last Modified: April 1, 2026, 2:09 p.m.

4.7

CVSS3.1

CVE-2025-62981 - WordPress WP Gravity Forms Zoho CRM and Bigin plugin <= 1.2.8 - Open Redirection vulnerability

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Phishing.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through <= 1.2.8.

πŸ“… Published: Oct. 27, 2025, 1:34 a.m. πŸ”„ Last Modified: April 1, 2026, 2:09 p.m.

8.8

CVSS3.1

CVE-2025-62980 - WordPress Persian Admnin Fonts plugin <= 4.1.03 - Broken Access Control vulnerability

Missing Authorization vulnerability in MDZ Persian Admnin Fonts persian-admin-fonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Persian Admnin Fonts: from n/a through <= 4.1.03.

πŸ“… Published: Oct. 27, 2025, 1:34 a.m. πŸ”„ Last Modified: April 1, 2026, 2:09 p.m.

5.3

CVSS3.1

CVE-2025-62979 - WordPress ACF to REST API plugin <= 3.3.4 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in airesvsg ACF to REST API acf-to-rest-api allows Retrieve Embedded Sensitive Data.This issue affects ACF to REST API: from n/a through <= 3.3.4.

πŸ“… Published: Oct. 27, 2025, 1:34 a.m. πŸ”„ Last Modified: April 1, 2026, 2:09 p.m.
Total resulsts: 344055
Page 2757 of 34,406
Β« previous page Β» next page
Filters