4.3

CVSS3.1

CVE-2025-30874 - WordPress Specific Content For Mobile plugin <= 0.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jose Mortellaro Specific Content For Mobile specific-content-for-mobile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Specific Content For Mobile: from n/a through <= 0.5.3.

πŸ“… Published: March 27, 2025, 10:55 a.m. πŸ”„ Last Modified: April 23, 2026, 3:27 p.m.

6.5

CVSS3.1

CVE-2025-30873 - WordPress Greenshift plugin <= 11.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Stored XSS.This issue affects Greenshift: from n/a through <= 11.0.2.

πŸ“… Published: March 27, 2025, 10:55 a.m. πŸ”„ Last Modified: April 23, 2026, 3:27 p.m.

4.3

CVSS3.1

CVE-2025-30872 - WordPress Product Author for WooCommerce plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) vulner…

Cross-Site Request Forgery (CSRF) vulnerability in Nitin Prakash Product Author for WooCommerce wc-product-author allows Cross Site Request Forgery.This issue affects Product Author for WooCommerce: from n/a through <= 1.0.7.

πŸ“… Published: March 27, 2025, 10:55 a.m. πŸ”„ Last Modified: April 23, 2026, 3:27 p.m.

7.5

CVSS3.1

CVE-2025-30871 - WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel Engine WP Travel Engine wp-travel-engine allows PHP Local File Inclusion.This issue affects WP Travel Engine: from n/a through <= 6.3.5.

πŸ“… Published: March 27, 2025, 10:55 a.m. πŸ”„ Last Modified: April 23, 2026, 3:27 p.m.

7.5

CVSS3.1

CVE-2025-30868 - WordPress Team Manager plugin <= 2.1.23 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Maidul Team Manager wp-team-manager allows PHP Local File Inclusion.This issue affects Team Manager: from n/a through <= 2.1.23.

πŸ“… Published: March 27, 2025, 10:55 a.m. πŸ”„ Last Modified: April 23, 2026, 3:27 p.m.

6.5

CVSS3.1

CVE-2025-30867 - WordPress SearchIQ plugin <= 4.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SearchIQ SearchIQ searchiq allows Stored XSS.This issue affects SearchIQ: from n/a through <= 4.7.

πŸ“… Published: March 27, 2025, 10:55 a.m. πŸ”„ Last Modified: April 23, 2026, 3:27 p.m.

5.3

CVSS3.1

CVE-2025-30866 - WordPress Terms & Conditions Per Product plugin <= 1.2.15 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Giannis Kipouros Terms & Conditions Per Product terms-and-conditions-per-product allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Terms & Conditions Per Product: from n/a through <= 1.2.15.

πŸ“… Published: March 27, 2025, 10:55 a.m. πŸ”„ Last Modified: April 23, 2026, 3:27 p.m.

4.3

CVSS3.1

CVE-2025-30865 - WordPress 3DPrint Lite plugin <= 2.1.3.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in fuzzoid 3DPrint Lite 3dprint-lite allows Cross Site Request Forgery.This issue affects 3DPrint Lite: from n/a through <= 2.1.3.5.

πŸ“… Published: March 27, 2025, 10:55 a.m. πŸ”„ Last Modified: April 23, 2026, 3:27 p.m.

4.3

CVSS3.1

CVE-2025-30864 - WordPress Exchange Rates plugin <= 1.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in falselight Exchange Rates exchange-rates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Exchange Rates: from n/a through <= 1.2.2.

πŸ“… Published: March 27, 2025, 10:55 a.m. πŸ”„ Last Modified: April 23, 2026, 3:27 p.m.

4.3

CVSS3.1

CVE-2025-30863 - WordPress Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin …

Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms integration-for-contact-form-7-and-google-sheets allows Cross Site Request Forgery.This issue affects Integration for Google Sheets and Contact Form 7, WPFo…

πŸ“… Published: March 27, 2025, 10:55 a.m. πŸ”„ Last Modified: April 23, 2026, 3:27 p.m.
Total resulsts: 349182
Page 6172 of 34,919
Β« previous page Β» next page
Filters