8.5

CVSS3.1

CVE-2025-31920 - WordPress WP Guppy plugin <= 4.3.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech WP Guppy wp-guppy allows SQL Injection.This issue affects WP Guppy: from n/a through <= 4.3.3.

📅 Published: June 9, 2025, 3:56 p.m. 🔄 Last Modified: April 23, 2026, 3:28 p.m.

7.1

CVSS3.1

CVE-2025-31925 - WordPress SHOUT plugin <= 3.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup SHOUT lbg-audio8-html5-radio_ads allows Reflected XSS.This issue affects SHOUT: from n/a through <= 3.5.3.

📅 Published: June 9, 2025, 3:56 p.m. 🔄 Last Modified: April 23, 2026, 3:28 p.m.

10

CVSS3.1

CVE-2025-32291 - WordPress SUMO Affiliates Pro plugin < 11.1.0 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Using Malicious Files.This issue affects SUMO Affiliates Pro: from n/a through < 11.1.0.

📅 Published: June 9, 2025, 3:54 p.m. 🔄 Last Modified: April 23, 2026, 3:28 p.m.

7.1

CVSS3.1

CVE-2025-32305 - WordPress FlatNews theme <= 5.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sneeit WordPress FlatNews Theme flatnews allows Reflected XSS.This issue affects WordPress FlatNews Theme: from n/a through <= 5.8.

📅 Published: June 9, 2025, 3:54 p.m. 🔄 Last Modified: April 23, 2026, 3:28 p.m.

7.6

CVSS3.1

CVE-2025-32308 - WordPress Team Builder plugin <= 1.5.7 - Broken Access Control Vulnerability

Missing Authorization vulnerability in looks_awesome Team Builder a-team-showcase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team Builder: from n/a through <= 1.5.7.

📅 Published: June 9, 2025, 3:54 p.m. 🔄 Last Modified: April 23, 2026, 3:28 p.m.

8.1

CVSS3.1

CVE-2025-32595 - WordPress Krowd theme < 1.5.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Krowd krowd allows PHP Local File Inclusion.This issue affects Krowd: from n/a through < 1.5.0.