VYPR
← WordPress

Vendor CVEs

WordPress

All CVEs

39,914 total · sorted by risk
  • CVE-2025-59568MedSep 22, 2025
    Zoho
    Zoho Flow
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Zoho Flow Zoho Flow zoho-flow allows Cross Site Request Forgery.This issue affects Zoho Flow: from n/a through <= 2.14.1.

  • CVE-2025-59561MedSep 22, 2025
    WordPress
    Smart Blocks
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in hashthemes Smart Blocks smart-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Blocks: from n/a through <= 2.4.

  • CVE-2025-59559MedSep 22, 2025
    WordPress
    Payrexx Payment Gateway for WooCommerce
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in payrexx Payrexx Payment Gateway for WooCommerce woo-payrexx-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payrexx Payment Gateway for WooCommerce: from n/a through <= 3.1.5.

  • CVE-2025-59551MedSep 22, 2025
    WordPress
    Revive So
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a through <= 2.0.6.

  • CVE-2025-58957MedSep 22, 2025
    Vikas Ratudi
    VPSUForm
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Vikas Ratudi VPSUForm v-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VPSUForm: from n/a through <= 3.2.20.

  • CVE-2025-58675MedSep 22, 2025
    WordPress
    Interact: Embed A Quiz On Your Site
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in tryinteract Interact: Embed A Quiz On Your Site interact-quiz-embed allows Cross Site Request Forgery.This issue affects Interact: Embed A Quiz On Your Site: from n/a through <= 3.1.

  • CVE-2025-58668MedSep 22, 2025
    WordPress
    WPLMS
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in VibeThemes WPLMS wplms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLMS : from n/a through <= 4.970.

  • CVE-2025-58666MedSep 22, 2025
    WordPress
    Website Chat Button Kommo Integration
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Kommo Website Chat Button: Kommo integration website-chat-button-kommo-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Website Chat Button: Kommo integration: from n/a through <= 1.3.1.

  • CVE-2025-58664MedSep 22, 2025
    WordPress
    Text To Speech TTS Accessibility
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Azizul Hasan Text To Speech TTS Accessibility text-to-audio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Text To Speech TTS Accessibility: from n/a through <= 1.9.30.

  • CVE-2025-58663MedSep 22, 2025
    WordPress
    Qubely
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Themeum Qubely qubely allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Qubely: from n/a through <= 1.8.14.

  • CVE-2025-58649MedSep 22, 2025
    WordPress
    All In One Seo Pack
    risk 0.28cvss 4.3epss 0.00

    Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Retrieve Embedded Sensitive Data.This issue affects All In One SEO Pack: from n/a through <= 4.8.7.1.

  • CVE-2025-58252MedSep 22, 2025
    WordPress
    Getwid
    risk 0.28cvss 4.3epss 0.00

    Insertion of Sensitive Information Into Sent Data vulnerability in jetmonsters Getwid getwid allows Retrieve Embedded Sensitive Data.This issue affects Getwid: from n/a through <= 2.1.2.

  • CVE-2025-58251MedSep 22, 2025
    WordPress
    Sticky Header Effects for Elementor
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in POSIMYTH Sticky Header Effects for Elementor sticky-header-effects-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sticky Header Effects for Elementor: from n/a through <= 2.1.2.

  • CVE-2025-58249MedSep 22, 2025
    WordPress
    Qubely
    risk 0.28cvss 4.3epss 0.00

    Insertion of Sensitive Information Into Sent Data vulnerability in Themeum Qubely qubely allows Retrieve Embedded Sensitive Data.This issue affects Qubely: from n/a through <= 1.8.14.

  • CVE-2025-58236MedSep 22, 2025
    WordPress
    Force Update Translations
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Mayo Moriyama Force Update Translations force-update-translations allows Cross Site Request Forgery.This issue affects Force Update Translations: from n/a through <= 0.5.

  • CVE-2025-58221MedSep 22, 2025
    WordPress
    Pilotpress
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in ONTRAPORT PilotPress pilotpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PilotPress: from n/a through <= 2.0.36.

  • CVE-2025-58219MedSep 22, 2025
    WordPress
    Show Pages List
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in LIJE Show Pages List show-pages-list allows Cross Site Request Forgery.This issue affects Show Pages List: from n/a through <= 1.2.0.

  • CVE-2025-58200MedSep 22, 2025
    WordPress
    Flexible Faq
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Bage Flexible FAQ flexible-faq allows Cross Site Request Forgery.This issue affects Flexible FAQ: from n/a through <= 0.2.

  • CVE-2025-58032MedSep 22, 2025
    WordPress
    Wp Compiler
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Bytes.co WP Compiler wp-compiler allows Cross Site Request Forgery.This issue affects WP Compiler: from n/a through <= 1.0.0.

  • CVE-2025-58014MedSep 22, 2025
    Ays Pro
    Quiz Maker
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through <= 6.7.0.64.

  • CVE-2025-58010MedSep 22, 2025
    Straightvisions GmbH
    SV Proven Expert
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in straightvisions GmbH SV Proven Expert sv-provenexpert allows Cross Site Request Forgery.This issue affects SV Proven Expert: from n/a through <= 2.0.06.

  • CVE-2025-58007MedSep 22, 2025
    WordPress
    Social Pug
    risk 0.28cvss 4.3epss 0.00

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NerdPress Hubbub Lite social-pug allows Retrieve Embedded Sensitive Data.This issue affects Hubbub Lite: from n/a through <= 1.35.2.

  • CVE-2025-57997MedSep 22, 2025
    WordPress
    Trustpilot Reviews
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Trustpilot Trustpilot Reviews trustpilot-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trustpilot Reviews: from n/a through <= 2.5.925.

  • CVE-2025-57995MedSep 22, 2025
    WordPress
    Dethemekit For Elementor
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DethemeKit For Elementor: from n/a through <= 2.1.10.

  • CVE-2025-57992MedSep 22, 2025
    InterServer
    Mail Baby SMTP
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in InterServer Mail Baby SMTP mail-baby-smtp allows Cross Site Request Forgery.This issue affects Mail Baby SMTP: from n/a through <= 2.8.

  • CVE-2025-57985MedSep 22, 2025
    WordPress
    Ultimate Watermark
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in MantraBrain Ultimate Watermark ultimate-watermark allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Watermark: from n/a through <= 1.1.

  • CVE-2025-57978MedSep 22, 2025
    WordPress
    Advanced Appointment Booking & Scheduling
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in themespride Advanced Appointment Booking & Scheduling advanced-appointment-booking-scheduling allows Cross Site Request Forgery.This issue affects Advanced Appointment Booking & Scheduling: from n/a through <= 2.1.

  • CVE-2025-57975MedSep 22, 2025
    WordPress
    tlp-team
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through <= 5.0.6.

  • CVE-2025-57972MedSep 22, 2025
    WordPress
    Support Ticket System For Woocommerce
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in WPFactory Helpdesk Support Ticket System for WooCommerce support-ticket-system-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Helpdesk Support Ticket System for WooCommerce: from…

  • CVE-2025-57970MedSep 22, 2025
    Salesmanago
    Salesmanago
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in SALESmanago SALESmanago & Leadoo salesmanago allows Cross Site Request Forgery.This issue affects SALESmanago & Leadoo: from n/a through <= 3.8.1.

  • CVE-2025-57969MedSep 22, 2025
    WordPress
    Hide WP Toolbar
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Jeremy Saxey Hide WP Toolbar hide-wp-toolbar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hide WP Toolbar: from n/a through <= 2.7.

  • CVE-2025-57961MedSep 22, 2025
    WordPress
    CoDesigner
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Codexpert, Inc CoDesigner woolementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoDesigner: from n/a through <= 4.29.

  • CVE-2025-57960MedSep 22, 2025
    WordPress
    TravelMap
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in TravelMap Travel Map travelmap-blog allows Cross Site Request Forgery.This issue affects Travel Map: from n/a through <= 1.0.3.

  • CVE-2025-57942MedSep 22, 2025
    WordPress
    Emergency Password Reset
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Emergency Password Reset emergency-password-reset allows Cross Site Request Forgery.This issue affects Emergency Password Reset: from n/a through <= 9.3.

  • CVE-2025-57937MedSep 22, 2025
    WordPress
    Wpematico Rss Feed Fetcher
    risk 0.28cvss 4.3epss 0.00

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in etruel WPeMatico RSS Feed Fetcher wpematico allows Retrieve Embedded Sensitive Data.This issue affects WPeMatico RSS Feed Fetcher: from n/a through <= 2.8.10.

  • CVE-2025-57936MedSep 22, 2025
    WordPress
    Subresource Integrity (SRI) Manager
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Meitar Subresource Integrity (SRI) Manager wp-sri allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Subresource Integrity (SRI) Manager: from n/a through <= 0.4.0.

  • CVE-2025-57934MedSep 22, 2025
    WordPress
    Lws Affiliation
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Aurélien LWS LWS Affiliation lws-affiliation allows Cross Site Request Forgery.This issue affects LWS Affiliation: from n/a through <= 2.3.6.

  • CVE-2025-57933MedSep 22, 2025
    WordPress
    Piotnetforms
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in piotnetdotcom Piotnet Forms piotnetforms allows Cross Site Request Forgery.This issue affects Piotnet Forms: from n/a through <= 1.0.30.

  • CVE-2025-57930MedSep 22, 2025
    WordPress
    Double The Donation
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in kanwei_doublethedonation Double the Donation double-the-donation allows Cross Site Request Forgery.This issue affects Double the Donation: from n/a through <= 2.0.0.

  • CVE-2025-57927MedSep 22, 2025
    WordPress
    Dashboard Notepads
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Stephanie Leary Dashboard Notepad dashboard-notepad allows Cross Site Request Forgery.This issue affects Dashboard Notepad: from n/a through <= 1.42.

  • CVE-2025-57924MedSep 22, 2025
    WordPress
    Developer
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Automattic Developer allows Cross Site Request Forgery. This issue affects Developer: from n/a through 1.2.6.

  • CVE-2025-57917MedSep 22, 2025
    Printcart
    Printcart Web to Print Product Designer for WooCommerce
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce printcart-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Printcart Web to Print Product Designer for WooCommerce: from…

  • CVE-2025-57916MedSep 22, 2025
    WordPress
    WP System Information
    risk 0.28cvss 4.3epss 0.00

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Nurul Amin WP System Information wp-system-info allows Retrieve Embedded Sensitive Data.This issue affects WP System Information: from n/a through <= 1.5.

  • CVE-2025-57915MedSep 22, 2025
    WordPress
    Tochat Be
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in César Martín TOCHAT.BE tochat-be allows Cross Site Request Forgery.This issue affects TOCHAT.BE: from n/a through <= 1.3.4.

  • CVE-2025-57914MedSep 22, 2025
    Matat Technologies
    Deliver via Shipos for WooCommerce
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Matat Technologies Deliver via Shipos for WooCommerce wc-shipos-delivery allows Cross Site Request Forgery.This issue affects Deliver via Shipos for WooCommerce: from n/a through <= 3.0.2.

  • CVE-2025-57905MedSep 22, 2025
    WordPress
    Agreeme Checkboxes For Woocommerce
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in Amin Y AgreeMe Checkboxes For WooCommerce agreeme-checkboxes-for-woocommerce allows Cross Site Request Forgery.This issue affects AgreeMe Checkboxes For WooCommerce: from n/a through <= 1.1.3.

  • CVE-2025-53456MedSep 22, 2025
    WordPress
    Seo Backlink Monitor
    risk 0.28cvss 4.3epss 0.00

    Cross-Site Request Forgery (CSRF) vulnerability in activewebsight SEO Backlink Monitor seo-backlink-monitor allows Cross Site Request Forgery.This issue affects SEO Backlink Monitor: from n/a through <= 1.8.0.

  • CVE-2025-53452MedSep 22, 2025
    WordPress
    Event Rocket
    risk 0.28cvss 4.3epss 0.00

    Missing Authorization vulnerability in Barry Event Rocket allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Event Rocket: from n/a through 3.3.

  • CVE-2025-9887MedSep 20, 2025
    WordPress
    Custom Login And Signup Widget
    risk 0.28cvss 4.3epss 0.00

    The Custom Login And Signup Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation in the /frndzk_adminclsw.php file. This makes it possible for unauthenticated…

  • CVE-2025-9949MedSep 20, 2025
    WordPress
    Internal Links Manager
    risk 0.28cvss 4.3epss 0.00

    The Internal Links Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on the link deletion functionality in the process_bulk_action() function. This makes it…

Page 667 of 799