VYPR
← WordPress

Vendor CVEs

WordPress

All CVEs

39,918 total · sorted by risk
  • CVE-2025-67471MedDec 9, 2025
    WordPress
    Quick Contact Form
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Quick Contact Form quick-contact-form allows Cross Site Request Forgery.This issue affects Quick Contact Form: from n/a through <= 8.2.5.

  • CVE-2025-67470MedDec 9, 2025
    WordPress
    Portfolio And Projects
    risk 0.28cvss 4.3epss 0.00

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Essential Plugin Portfolio and Projects portfolio-and-projects allows Retrieve Embedded Sensitive Data.This issue affects Portfolio and Projects: from n/a through <= 1.5.5.

  • CVE-2025-67469MedDec 9, 2025
    WordPress
    PDF Thumbnail Generator
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-generator allows Cross Site Request Forgery.This issue affects PDF Thumbnail Generator: from n/a through <= 1.4.

  • CVE-2025-67468MedDec 9, 2025
    Crmperks
    Integration For Salesforce And Contact Form 7\, Wpforms\, Elementor\, Ninja Forms
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in CRM Perks Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms cf7-salesforce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integration for Salesforce and…

  • CVE-2025-67466MedDec 9, 2025
    WordPress
    Trinity Audio
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in sergiotrinity Trinity Audio trinity-audio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trinity Audio: from n/a through <= 5.23.3.

  • CVE-2025-67465MedDec 9, 2025
    WordPress
    Simple Link Directory
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud Simple Link Directory simple-link-directory allows Cross Site Request Forgery.This issue affects Simple Link Directory: from n/a through <= 8.8.3.

  • CVE-2025-66534MedDec 9, 2025
    WordPress
    Theaisle
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Elated-Themes The Aisle theaisle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Aisle: from n/a through <= 2.9.

  • CVE-2025-66532MedDec 9, 2025
    Qodeinteractive
    Powerlift
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Powerlift: from n/a through < 3.2.1.

  • CVE-2025-66531MedDec 9, 2025
    WordPress
    Salon Booking System
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross Site Request Forgery.This issue affects Salon booking system: from n/a through <= 10.30.3.

  • CVE-2025-66530MedDec 9, 2025
    WordPress
    Webba Appointment Booking
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through <= 6.2.1.

  • CVE-2025-66529MedDec 9, 2025
    WordPress
    Chartify
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through <= 3.6.3.

  • CVE-2025-66528MedDec 9, 2025
    WordPress
    Thank You Page Customizer for WooCommerce
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Thank You Page Customizer for WooCommerce: from n/a through <=…

  • CVE-2025-66527MedDec 9, 2025
    WordPress
    Lobo
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in VanKarWai Lobo lobo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lobo: from n/a through <= 2.8.6.

  • CVE-2025-66526MedDec 9, 2025
    WordPress
    Tablesome
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through <= 1.1.34.

  • CVE-2025-66525MedDec 9, 2025
    Elastic Email Sender
    Elastic Email Sender
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Elastic Email Elastic Email Sender elastic-email-sender allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elastic Email Sender: from n/a through <= 1.2.20.

  • CVE-2025-64257MedDec 9, 2025
    WordPress
    My Tickets
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Joe Dolson My Tickets my-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects My Tickets: from n/a through <= 2.1.0.

  • CVE-2025-63077MedDec 9, 2025
    WordPress
    Happy Addons For Elementor
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Happy Addons for Elementor: from n/a through <= 3.20.3.

  • CVE-2025-63070MedDec 9, 2025
    WordPress
    Download Manager
    risk 0.28cvss 4.3epss 0.00

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Shahjada Download Manager download-manager allows Retrieve Embedded Sensitive Data.This issue affects Download Manager: from n/a through <= 3.3.32.

  • CVE-2025-63067MedDec 9, 2025
    WordPress
    Porto Functionality
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in p-themes Porto Theme - Functionality porto-functionality allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Porto Theme - Functionality: from n/a through < 3.7.3.

  • CVE-2025-63060MedDec 9, 2025
    WordPress
    Kallyas
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in hogash KALLYAS kallyas allows Cross Site Request Forgery.This issue affects KALLYAS: from n/a through < 4.25.0.

  • CVE-2025-63058MedDec 9, 2025
    WordPress
    Custom Field Template
    risk 0.28cvss 4.3epss 0.00

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Hiroaki Miyashita Custom Field Template custom-field-template allows Retrieve Embedded Sensitive Data.This issue affects Custom Field Template: from n/a through <= 2.7.6.

  • CVE-2025-63056MedDec 9, 2025
    Bestwebsoft
    Contact Form by BestWebSoft
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by BestWebSoft: from n/a through <= 4.3.6.

  • CVE-2025-63025MedDec 9, 2025
    Xagio SEO
    xagio-seo
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Xagio SEO Xagio SEO xagio-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xagio SEO: from n/a through <= 7.1.0.37.

  • CVE-2025-63015MedDec 9, 2025
    WordPress
    WooCommerce Payment Gateway - Paysera
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in paysera WooCommerce Payment Gateway - Paysera woo-payment-gateway-paysera allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Payment Gateway - Paysera: from n/a through <= 3.10.0.

  • CVE-2025-63013MedDec 9, 2025
    WordPress
    Wp Hotel Booking
    risk 0.28cvss 4.3epss 0.00

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows Retrieve Embedded Sensitive Data.This issue affects WP Hotel Booking: from n/a through <= 2.2.7.

  • CVE-2025-63012MedDec 9, 2025
    WordPress
    Wp Hotel Booking
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows Cross Site Request Forgery.This issue affects WP Hotel Booking: from n/a through <= 2.2.8.

  • CVE-2025-63007MedDec 9, 2025
    Metagauss
    EventPrime event-calendar-management
    risk 0.28cvss 4.3epss 0.00

    Insertion of Sensitive Information Into Sent Data vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Retrieve Embedded Sensitive Data.This issue affects EventPrime: from n/a through <= 4.2.4.1.

  • CVE-2025-63006MedDec 9, 2025
    WordPress
    Eventprime
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through <= 4.2.4.1.

  • CVE-2025-62996MedDec 9, 2025
    WordPress
    Custom Layouts – Post + Product grids made easy
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Code Amp Custom Layouts – Post + Product grids made easy custom-layouts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Layouts – Post + Product grids made easy: from n/a through <=…

  • CVE-2025-62994MedDec 9, 2025
    WordPress
    AI Copilot
    risk 0.28cvss 4.3epss 0.00

    Insertion of Sensitive Information Into Sent Data vulnerability in WP Messiah WP AI CoPilot ai-co-pilot-for-wp allows Retrieve Embedded Sensitive Data.This issue affects WP AI CoPilot: from n/a through <= 1.2.7.

  • CVE-2025-62993MedDec 9, 2025
    WordPress
    Notification For Telegram
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notification for Telegram: from n/a through <= 3.5.1.

  • CVE-2025-62873MedDec 9, 2025
    WordPress
    Wp Flashy Marketing Automation
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Flashyapp WP Flashy Marketing Automation wp-flashy-marketing-automation allows Cross Site Request Forgery.This issue affects WP Flashy Marketing Automation: from n/a through <= 2.0.8.

  • CVE-2025-62872MedDec 9, 2025
    WordPress
    Social Photo Fetcher
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in JK Social Photo Fetcher facebook-photo-fetcher allows Cross Site Request Forgery.This issue affects Social Photo Fetcher: from n/a through <= 3.0.4.

  • CVE-2025-62871MedDec 9, 2025
    WordPress
    Just TinyMCE Custom Styles
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Alex Prokopenko / JustCoded Just TinyMCE Custom Styles just-tinymce-styles allows Cross Site Request Forgery.This issue affects Just TinyMCE Custom Styles: from n/a through <= 1.2.1.

  • CVE-2025-62869MedDec 9, 2025
    Gravitec.net
    Web Push Notifications
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Gravitec.net - Web Push Notifications Gravitec.net – Web Push Notifications gravitec-net-web-push-notifications allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gravitec.net – Web Push…

  • CVE-2025-62866MedDec 9, 2025
    WordPress
    Auto Alt Text
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Valerio Monti Auto Alt Text auto-alt-text allows Cross Site Request Forgery.This issue affects Auto Alt Text: from n/a through <= 2.5.2.

  • CVE-2025-62762MedDec 9, 2025
    WordPress
    SMTP Mail
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in photoboxone SMTP Mail smtp-mail allows Cross Site Request Forgery.This issue affects SMTP Mail: from n/a through <= 1.3.51.

  • CVE-2025-62736MedDec 9, 2025
    WordPress
    Image Cleanup
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in opicron Image Cleanup image-cleanup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Cleanup: from n/a through <= 1.9.2.

  • CVE-2025-62734MedDec 9, 2025
    WordPress
    Media Library Downloader
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in M.Code Media Library Downloader media-library-downloader allows Cross Site Request Forgery.This issue affects Media Library Downloader: from n/a through <= 1.4.0.

  • CVE-2025-62733MedDec 9, 2025
    WordPress
    Custom Sidebars By Proteusthemes
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in ProteusThemes Custom Sidebars by ProteusThemes custom-sidebars-by-proteusthemes allows Cross Site Request Forgery.This issue affects Custom Sidebars by ProteusThemes: from n/a through <= 1.0.3.

  • CVE-2025-62103MedDec 9, 2025
    WordPress
    Media Library File Download
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in wpmediadownload Media Library File Download media-download allows Cross Site Request Forgery.This issue affects Media Library File Download: from n/a through <= 1.4.

  • CVE-2025-62102MedDec 9, 2025
    WordPress
    Dofollow Case By Case
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through <= 3.5.1.

  • CVE-2025-59132MedDec 9, 2025
    WordPress
    Duplicate Content Cure
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Badi Jones Duplicate Content Cure duplicate-content-cure allows Cross Site Request Forgery.This issue affects Duplicate Content Cure: from n/a through <= 1.0.

  • CVE-2025-49350MedDec 9, 2025
    WordPress
    Actionwear Products Sync
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in marcoingraiti Actionwear products sync actionwear-products-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Actionwear products sync: from n/a through <= 2.3.3.

  • CVE-2025-13642MedDec 9, 2025
    WordPress
    Profilepress
    risk 0.28cvss 5.4epss 0.00

    The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.16.7 due to insufficient input sanitization on…

  • CVE-2025-13629MedDec 6, 2025
    WordPress
    Wp Landing Page
    risk 0.28cvss 4.3epss 0.00

    The WP Landing Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9.3. This is due to missing nonce validation on the 'wplp_api_update_text' function. This makes it possible for unauthenticated attackers to update…

  • CVE-2025-13309MedDec 6, 2025
    WordPress
    Accessiy By CodeConfig Accessibility
    risk 0.28cvss 4.3epss 0.00

    The Accessiy By CodeConfig Accessibility – Easy One-Click Accessibility Toolbar That Truly Matters plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.0.2. This is due to the plugin not properly verifying that a user is authorized to…

  • CVE-2025-12577MedDec 6, 2025
    WordPress
    Listar
    risk 0.28cvss 4.3epss 0.00

    The Listar – Directory Listing & Classifieds WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/listar/v1/place/save' REST API endpoint in all versions up to, and including, 3.0.0. This…

  • CVE-2025-12574MedDec 6, 2025
    WordPress
    Listar – Directory Listing & Classifieds
    risk 0.28cvss 4.3epss 0.00

    The Listar – Directory Listing & Classifieds WordPress Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the '/wp-json/listar/v1/place/delete' REST API endpoint in all versions up to, and including, 3.0.0. This makes it…

  • CVE-2025-12354MedDec 5, 2025
    WordPress
    Live CSS Preview
    risk 0.28cvss 4.3epss 0.00

    The Live CSS Preview plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_frontend_save' AJAX endpoint in all versions up to, and including, 2.1.4. This makes it possible for authenticated attackers, with…

Page 662 of 799