6.5

CVSS3.1

CVE-2025-64369 - WordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerability

Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form Email: from n/a through <= 1.3.58.

πŸ“… Published: Nov. 13, 2025, 9:24 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

6.5

CVSS3.1

CVE-2025-64292 - WordPress Analytics Germanized for Google Analytics plugin <= 1.6.2 - Cross Site Scripting (XSS) vu…

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PascalBajorat Analytics Germanized for Google Analytics ga-germanized allows DOM-Based XSS.This issue affects Analytics Germanized for Google Analytics: from n/a through <= 1.6.2.

πŸ“… Published: Nov. 13, 2025, 9:24 a.m. πŸ”„ Last Modified: April 24, 2026, 7:19 p.m.

5.3

CVSS3.1

CVE-2025-64277 - WordPress ChatBot plugin <= 7.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through <= 7.3.9.

πŸ“… Published: Nov. 13, 2025, 9:24 a.m. πŸ”„ Last Modified: April 24, 2026, 7:19 p.m.

6.5

CVSS3.1

CVE-2025-64276 - WordPress Survey Maker plugin <= 5.1.9.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ays Pro Survey Maker survey-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Survey Maker: from n/a through <= 5.1.9.4.

πŸ“… Published: Nov. 13, 2025, 9:24 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

6.5

CVSS3.1

CVE-2025-64275 - WordPress Booking Manager plugin <= 2.1.17 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevelop Booking Manager booking-manager allows Stored XSS.This issue affects Booking Manager: from n/a through <= 2.1.17.

πŸ“… Published: Nov. 13, 2025, 9:24 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

4.3

CVSS3.1

CVE-2025-64274 - WordPress WPKoi Templates for Elementor plugin <= 3.4.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in wpkoithemes WPKoi Templates for Elementor wpkoi-templates-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPKoi Templates for Elementor: from n/a through <= 3.4.4.

πŸ“… Published: Nov. 13, 2025, 9:24 a.m. πŸ”„ Last Modified: April 24, 2026, 7:19 p.m.

4.3

CVSS3.1

CVE-2025-64271 - WordPress WP Plugin Manager plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes WP Plugin Manager wp-plugin-manager allows Cross Site Request Forgery.This issue affects WP Plugin Manager: from n/a through <= 1.4.7.

πŸ“… Published: Nov. 13, 2025, 9:24 a.m. πŸ”„ Last Modified: April 24, 2026, 7:19 p.m.

4.3

CVSS3.1

CVE-2025-64269 - WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.150 - Broken Access Control vulnerability

Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoice Builder: from n/a through <= 1.2.150.

πŸ“… Published: Nov. 13, 2025, 9:24 a.m. πŸ”„ Last Modified: April 24, 2026, 7:19 p.m.

4.3

CVSS3.1

CVE-2025-64267 - WordPress WooCommerce Ultimate Points And Rewards plugin <= 2.10.2 - Sensitive Data Exposure vulner…

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce Ultimate Points And Rewards woocommerce-ultimate-points-and-rewards allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Ultimate Points And Rewards: from n/a through <…

πŸ“… Published: Nov. 13, 2025, 9:24 a.m. πŸ”„ Last Modified: April 24, 2026, 7:19 p.m.

4.3

CVSS3.1

CVE-2025-64265 - WordPress Frontend File Manager plugin <= 23.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.2.

πŸ“… Published: Nov. 13, 2025, 9:24 a.m. πŸ”„ Last Modified: April 24, 2026, 7:19 p.m.
Total resulsts: 349182
Page 3024 of 34,919
Β« previous page Β» next page
Filters