Tag: 2025-04-17

7 Attack Reports | 311 Vulnerabilities

Attack reports

Roundup: Care what you share

This report discusses the importance of being mindful of the information shared online, particularly when using search engines and AI-powered tools. It highlights the risks associated with sharing personal data and preferences, which can be stored and used for advertising or other purposes. The aut…
xorddos
2025-04-17
data sharing
searxng
Published: April 17, 2025
Downloadable IOCs: 4

KeyPlug-Linked Server Exposes Fortinet Exploits & Webshell Activity Targeting a Major Japanese Company

A server linked to KeyPlug malware briefly exposed tooling used in active operations. The infrastructure, live for less than a day, revealed Fortinet firewall and VPN exploit scripts, a PHP webshell, and network reconnaissance tools targeting authentication and internal portals of a major Japanese …
fortinet
keyplug
2025-04-17
CVE-2024-23108
CVE-2024-23109
Published: April 17, 2025
Linked vulnerabilities : CVE-2024-23109, CVE-2024-23108
Downloadable IOCs: 14

Malicious HWP Document Disguised as Reunification Education Support Application

A deceptive HWP document, masquerading as a reunification education support application, was discovered on March 5. The document, when opened, creates multiple files in the TEMP folder, including a malicious BAT file. This BAT file executes various actions to ensure persistent malware operation, in…
dropper
downloader
hwp
2025-04-17
Published: April 17, 2025
Downloadable IOCs: 3

Downloader Malware Written in JPHP Interpreter

A newly discovered malware utilizes JPHP, a PHP interpreter running on Java Virtual Machine, to create a downloader. The malware is distributed in a ZIP file containing Java Runtime Environment and libraries, enabling execution without a separate Java environment. It communicates with a C2 server, …
danabot
strrat
php
jphp
2025-04-17
Published: April 17, 2025
Downloadable IOCs: 4

Around the World in 90 Days: State-Sponsored Actors Try ClickFix

Multiple state-sponsored threat actors from North Korea, Iran, and Russia have been observed adopting the ClickFix social engineering technique, previously associated with cybercriminal activities. Over a three-month period from late 2024 to early 2025, groups such as TA427, TA450, UNK_RemoteRogue,…
clickfix
quasarrat
metasploit
2025-04-17
level
Published: April 17, 2025
Downloadable IOCs: 0

New version of MysterySnail RAT and lightweight MysteryMonoSnail backdoor

A new version of the MysterySnail RAT, attributed to the Chinese-speaking IronHusky APT group, has been detected targeting government organizations in Mongolia and Russia. The malware, which hadn't been publicly reported since 2021, now features a modular architecture with five additional DLL modul…
apt
2025-04-17
ironhusky
mysterymonosnail
mysterysnail
Published: April 17, 2025
Linked vulnerabilities : CVE-2021-40449
Downloadable IOCs: 2

Unmasking the new XorDDoS controller and infrastructure

The XorDDoS trojan, a DDoS malware targeting Linux machines, continues to spread globally with over 70% of attacks targeting the United States from Nov 2023 to Feb 2025. The operators are believed to be Chinese-speaking individuals based on language settings. A new 'VIP version' of the XorDDoS cont…
linux
ddos
xorddos
brute-force
2025-04-17
Published: April 17, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-32660

10.0
    Joomsky
  • Js Job Manager
Published: April 17, 2025

CVE-2025-31340

9.9
    Wisdom Master Pro
  • Wisdom Master Pro
Published: April 17, 2025

CVE-2025-27282

9.9
    Rockgod100
  • Theme File Duplicator
Published: April 17, 2025

CVE-2025-32583

9.9
    Termel
  • Pdf 2 Post
Published: April 17, 2025

CVE-2025-32652

9.9
    Solacewp
  • Solace Extra
Published: April 17, 2025

CVE-2025-32682

9.9
    Romancode
  • Mapsvg Lite
Published: April 17, 2025

CVE-2025-27286

9.8
    Saoshyant1994
  • Saoshyant Slider
Published: April 17, 2025

CVE-2025-27287

9.8
    Ssvadim
  • Ss Quiz
Published: April 17, 2025

CVE-2025-31380

9.8
    Videowhisper
  • Paid Videochat Turnkey Site
Published: April 17, 2025

CVE-2025-32572

9.8
    Climax Themes
  • Kata Plus
Published: April 17, 2025

CVE-2025-32648

9.8
    Projectopia
  • Projectopia
Published: April 17, 2025

CVE-2025-32658

9.8
    Wpwax
  • Helpgent
Published: April 17, 2025

CVE-2025-39550

9.8
    Shahjahan Jewel
  • Fluentcommunity
Published: April 17, 2025

CVE-2025-39551

9.8
    Mahmudul Hasan Arif
  • Fluentboards
Published: April 17, 2025

CVE-2025-39588

9.8
    Bdthemes
  • Ultimate Store Kit Elementor Addons
Published: April 17, 2025

CVE-2025-39596

9.8
    Quentn
  • Quentn Wp
Published: April 17, 2025

CVE-2025-28009

9.8
    Dietiqa
  • Dietiqa App
Published: April 17, 2025

CVE-2025-3651

9.3
    Work
  • Desktop For Mac
Published: April 17, 2025

CVE-2025-22655

9.3
    Caio Web Dev
  • Cwd Stealth Links
Published: April 17, 2025

CVE-2025-27302

9.3
    Claudio Adrian Marrero
  • Chatlive
Published: April 17, 2025

CVE-2025-32626

9.3
    Joomsky
  • Js Job Manager
Published: April 17, 2025

CVE-2025-32636

9.3
    Matthewrubin
  • Local Magic
Published: April 17, 2025

CVE-2025-32665

9.3
    Webbytemplate
  • Office Locator
Published: April 17, 2025

CVE-2025-39587

9.3
    Stylemix
  • Cost Calculator Builder
Published: April 17, 2025

CVE-2025-39595

9.3
    Quentn
  • Quentn Wp
Published: April 17, 2025

CVE-2025-39436

9.1
    Aidraw
  • I Draw
Published: April 17, 2025

CVE-2025-3113

9.0
    Puppet
  • Continuous Compliance
Published: April 17, 2025

CVE-2025-32571

8.8
    Turitop
  • Turi Top Booking System
Published: April 17, 2025

CVE-2025-32647

8.8
    Pickplugins
  • Question Answer
Published: April 17, 2025

CVE-2025-32662

8.8
    Stylemix
  • Ulisting
Published: April 17, 2025

CVE-2025-32686

8.8
    Speedo
  • Team Members
Published: April 17, 2025

CVE-2025-39527

8.8
    Bestwebsoft
  • Rating
Published: April 17, 2025

CVE-2025-39533

8.8
    Starfish Reviews
  • Starfish Review Generation And Marketing
Published: April 17, 2025

CVE-2025-39542

8.8
    Jauhari
  • Xelion Webchat
Published: April 17, 2025

CVE-2022-26323

8.7
    Opentext
  • Operations Bridge Manager
  • Operations Bridge Suite
  • Ucmdb
Published: April 17, 2025

CVE-2025-2903

8.5
    Google
  • Google Cloud Platform
    Puppet
Published: April 17, 2025

CVE-2025-32573

8.5
    Kiotviet
  • Kiotviet Sync
Published: April 17, 2025

CVE-2025-39569

8.5
    Taskbuilder
  • Taskbuilder
Published: April 17, 2025

CVE-2025-39586

8.5
    Metagauss
  • Profilegrid
Published: April 17, 2025

CVE-2024-55211

8.4
    Think Router
  • Tk-Rt-Wr135g
Published: April 17, 2025

CVE-2025-43012

8.3
    Jetbrains
  • Toolbox App
Published: April 17, 2025

CVE-2025-43015

8.3
    Jetbrains
  • Rubymine
Published: April 17, 2025

CVE-2025-22636

8.2
    Vicente Ruiz Galvez
  • Vr-Frases
Published: April 17, 2025

CVE-2025-32593

8.2
    Bytes Technolab
  • Add Product Frontend Woocommerce
Published: April 17, 2025

CVE-2025-1290

8.1
    Google
  • Chromebook
Published: April 17, 2025

CVE-2025-43715

8.1
    Nullsoft
  • Nsis
Published: April 17, 2025

CVE-2025-1532

8.1
    Phoneservice
  • Phoneservice
Published: April 17, 2025

CVE-2025-2188

8.1
    *
  • Gamecenter
Published: April 17, 2025

CVE-2025-39526

8.1
    Nicdark
  • Hotel Booking
Published: April 17, 2025

CVE-2021-47668

7.8
    Linux
  • Linux Kernel
Published: April 17, 2025

CVE-2021-47669

7.8
    Linux
  • Linux Kernel
Published: April 17, 2025

CVE-2021-47670

7.8
    Linux
  • Kernel
Published: April 17, 2025

CVE-2025-26968

7.5
    Webbernaut
  • Cloak Front End Email
Published: April 17, 2025

CVE-2025-31030

7.5
    Jbhovik
  • Ray Enterprise Translation
Published: April 17, 2025

CVE-2025-32544

7.5
    Right Software
  • Woocommerce Loyal Customers
Published: April 17, 2025

CVE-2025-32594

7.5
    Wpminds
  • Simple Wp Events
Published: April 17, 2025

CVE-2025-32635

7.5
    Hive Support
  • Hive Support
Published: April 17, 2025

CVE-2025-39429

7.5
    Földesi
  • Széchenyi 2020 Logo
Published: April 17, 2025

CVE-2025-39452

7.5
    Themewinter
  • Wpcafe
Published: April 17, 2025

CVE-2025-39461

7.5
    Nawawi Jamili
  • Docket Cache
Published: April 17, 2025

CVE-2025-39462

7.5
    Teamzt
  • Smart Agreements
Published: April 17, 2025

CVE-2025-39532

7.5
    Spicethemes
  • Spice Blocks
Published: April 17, 2025

CVE-2025-39568

7.5
    Arture B.V.
  • Storecontrl Woocommerce
Published: April 17, 2025

CVE-2025-32596

7.3
    Rameez Iqbal
  • Real Estate Manager
Published: April 17, 2025

CVE-2025-3294

7.2
    Wordpress
  • Wp Editor
Published: April 17, 2025

CVE-2025-39535

7.2
    Appsbd
  • Vitepos
Published: April 17, 2025

CVE-2025-29039

7.2
    Dlink
  • Dir 832x
Published: April 17, 2025

CVE-2025-29180

7.2
    Foxcms
  • Foxcms
Published: April 17, 2025

CVE-2025-29181

7.2
    Foxcms
  • Foxcms
Published: April 17, 2025

CVE-2025-29661

7.2
    Litepubl
  • Litepubl Cms
Published: April 17, 2025

CVE-2025-2947

7.2
    Ibm
  • Ibm I
Published: April 17, 2025

CVE-2025-25234

7.1
    Omnissa
  • Uag
Published: April 17, 2025

CVE-2024-55238

7.1
    Openmetadata
  • Openmetadata
Published: April 17, 2025

CVE-2025-22565

7.1
    Bill Zimmerman
  • Vooplayer
Published: April 17, 2025

CVE-2025-22651

7.1
    Wppluginboxdev
  • Stylish Google Sheet Reader
Published: April 17, 2025

CVE-2025-22692

7.1
    Rachanas
  • Sponsered Link
Published: April 17, 2025

CVE-2025-22774

7.1
    Crudlab
  • Crudlab Scroll To Top
Published: April 17, 2025

CVE-2025-22796

7.1
    Platcom
  • Wp-Asambleas
Published: April 17, 2025

CVE-2025-23443

7.1
    Claire Ryan
  • Author Showcase
Published: April 17, 2025

CVE-2025-23448

7.1
    Dastan800
  • Visualslider
Published: April 17, 2025

CVE-2025-23782

7.1
    Totalsuite
  • Totalcontest Lite
Published: April 17, 2025

CVE-2025-23855

7.1
    Fyljp
  • Spiderdisplay
Published: April 17, 2025

CVE-2025-23858

7.1
    Hiren Patel
  • Custom Users Order
Published: April 17, 2025

CVE-2025-24539

7.1
    Debounce
  • Debounce Email Validator
Published: April 17, 2025

CVE-2025-24548

7.1
    Autoglot
  • Automatic Wordpress Translation
Published: April 17, 2025

CVE-2025-24553

7.1
    Akadrama
  • Shipping With Venipak For Woocommerce
Published: April 17, 2025

CVE-2025-24586

7.1
    Bitsstech
  • Shipment Tracker For Woocommerce
Published: April 17, 2025

CVE-2025-24619

7.1
    Webheadcoder
  • Wp Log Action
Published: April 17, 2025

CVE-2025-24621

7.1
    Tychesoftwares
  • Arconix Shortcodes
Published: April 17, 2025

CVE-2025-24624

7.1
    Hastech
  • Ht Event
Published: April 17, 2025

CVE-2025-24637

7.1
    Syed Balkhi
  • Beacon Lead Magnets
  • Lead Capture
Published: April 17, 2025

CVE-2025-24640

7.1
    Dan-Lucian Stefancu
  • Empty Tags Remover
Published: April 17, 2025

CVE-2025-24645

7.1
    Rob Scott
  • Eazy Under Construction
Published: April 17, 2025

CVE-2025-24655

7.1
    Pickplugins
  • Wishlist
Published: April 17, 2025

CVE-2025-24670

7.1
    Dhanendran
  • Term Taxonomy Converter
Published: April 17, 2025

CVE-2025-24745

7.1
    Radius Theme
  • Classified Listing
Published: April 17, 2025

CVE-2025-24752

7.1
    Wpdeveloper
  • Essential Addons For Elementor
Published: April 17, 2025

CVE-2025-27284

7.1
    Divspark
  • Flagged Content
Published: April 17, 2025

CVE-2025-27285

7.1
    Ays
  • Easy Form
Published: April 17, 2025

CVE-2025-27288

7.1
    Bjornw
  • File Icons
Published: April 17, 2025

CVE-2025-27289

7.1
    *
  • Restrict Taxonomies
Published: April 17, 2025

CVE-2025-27291

7.1
    Wordpress
  • Photo Gallery
    Uxgallery
Published: April 17, 2025

CVE-2025-27292

7.1
    Wpyog
  • Wpyog Documents
Published: April 17, 2025

CVE-2025-27293

7.1
    Shipmozo
  • Shipmozo Courier Tracking
Published: April 17, 2025

CVE-2025-27295

7.1
    Wpion
  • Live Css
Published: April 17, 2025

CVE-2025-27308

7.1
    Cmstactics
  • Wp Video Posts
Published: April 17, 2025

CVE-2025-27309

7.1
    Jeannot Muller
  • Flickr Slideshow Wrapper
Published: April 17, 2025

CVE-2025-27313

7.1
    Bernd Altmeier
  • Google Maps Gpx Viewer
Published: April 17, 2025

CVE-2025-27314

7.1
    Kush Sharma
  • Kush Micro News
Published: April 17, 2025

CVE-2025-27319

7.1
    Ivan82
  • User List
Published: April 17, 2025

CVE-2025-27322

7.1
    Bappa Mal
  • Qr Code For Woocommerce
Published: April 17, 2025

CVE-2025-27324

7.1
    17track
  • Woocommerce
Published: April 17, 2025

CVE-2025-27333

7.1
    Alvego
  • Protected Wp-Login
Published: April 17, 2025

CVE-2025-27337

7.1
    Kontur
  • Fontsampler
Published: April 17, 2025

CVE-2025-27338

7.1
    Graphems
  • List Urls
Published: April 17, 2025

CVE-2025-27343

7.1
    Webilop
  • Woocommerce Html5 Video
Published: April 17, 2025

CVE-2025-27345

7.1
    Deetronix
  • Booking Ultra Pro
Published: April 17, 2025

CVE-2025-27346

7.1
    Gerrygooner
  • Rebuild Permalinks
Published: April 17, 2025

CVE-2025-27354

7.1
    Phil88530
  • Simple Email Subscriber
Published: April 17, 2025

CVE-2025-31006

7.1
    Arete-It
  • Activity Reactions For Buddypress
Published: April 17, 2025

CVE-2025-31018

7.1
    Firedrum
  • Firedrum Email Marketing
Published: April 17, 2025

CVE-2025-32490

7.1
    Website Defender
  • Wp Secure
Published: April 17, 2025

CVE-2025-32504

7.1
    Silvasoft
  • Boekhouden
Published: April 17, 2025

CVE-2025-32506

7.1
    Ben Dlz
  • At Internet Smarttag
Published: April 17, 2025

CVE-2025-32507

7.1
    Aakif Kadiwala
  • Event Espresso Custom Email Template Shortcode
Published: April 17, 2025

CVE-2025-32508

7.1
    Commotion
  • Course Booking System
Published: April 17, 2025

CVE-2025-32511

7.1
    Excellent Dynamics
  • Make Email Customizer For Woocommerce
Published: April 17, 2025

CVE-2025-32512

7.1
    Revampcrm
  • Revamp Crm For Woocommerce
Published: April 17, 2025

CVE-2025-32513

7.1
    Totalprocessing
  • Nomupay Payment Processing Gateway
Published: April 17, 2025

CVE-2025-32514

7.1
    Woocommerce
  • Estimate And Quote
Published: April 17, 2025

CVE-2025-32515

7.1
    Terminalafrica
  • Terminal Africa
Published: April 17, 2025

CVE-2025-32516

7.1
    Ilghera
  • Related Videos For Jw Player
Published: April 17, 2025

CVE-2025-32520

7.1
    Wordpress
  • Health And Server Condition
Published: April 17, 2025

CVE-2025-32521

7.1
    Coolhappy
  • Cool Flipbox
Published: April 17, 2025

CVE-2025-32522

7.1
    Wpexperts
  • License Manager For Woocommerce
Published: April 17, 2025

CVE-2025-32526

7.1
    Dylan James
  • Zephyr Project Manager
Published: April 17, 2025

CVE-2025-32527

7.1
    Pey22
  • T%2bp Gallery Slider
Published: April 17, 2025

CVE-2025-32528

7.1
    Maximevalette
  • Ical Feeds
Published: April 17, 2025

CVE-2025-32529

7.1
    Ione360
  • Ione360 Configurator
Published: April 17, 2025

CVE-2025-32530

7.1
    Wp Swings
  • Wallet System For Woocommerce
Published: April 17, 2025

CVE-2025-32531

7.1
    Tychesoftwares
  • Arconix Faq
Published: April 17, 2025

CVE-2025-32532

7.1
    Pei Yong Goh
  • Uxsniff
Published: April 17, 2025

CVE-2025-32533

7.1
    Matat Technologies
  • Deliver Via Shipos
Published: April 17, 2025

CVE-2025-32535

7.1
    Patchstack
  • Dn Shipping By Weight For Woocommerce
Published: April 17, 2025

CVE-2025-32540

7.1
    Feedify
  • Web Push Notifications
Published: April 17, 2025

CVE-2025-32545

7.1
    Softagon
  • Woocommerce Products
Published: April 17, 2025

CVE-2025-32546

7.1
    Gtlwpdev
  • All Push Notification For Wp
Published: April 17, 2025

CVE-2025-32548

7.1
    Borisolhor
  • Hamburger Icon Menu Lite
Published: April 17, 2025

CVE-2025-32552

7.1
    Wpfactory
  • Msrp Rrp Pricing For Woocommerce
Published: April 17, 2025

CVE-2025-32554

7.1
    Raptive
  • Raptive Ads
Published: April 17, 2025

CVE-2025-32557

7.1
    Rico Macchi
  • Wp Featured Screenshot
Published: April 17, 2025

CVE-2025-32560

7.1
    Okfie
  • Wp-Hijri
Published: April 17, 2025

CVE-2025-32561

7.1
    Wordpress
  • Wp Debug Toggle
Published: April 17, 2025

CVE-2025-32562

7.1
    Aviplugins
  • Wp Easy Poll
Published: April 17, 2025

CVE-2025-32564

7.1
    Tomroyal
  • Stop Registration Spam
Published: April 17, 2025

CVE-2025-32566

7.1
    Ashraful Sarkar
  • License For Envato
Published: April 17, 2025

CVE-2025-32578

7.1
    Mapro
  • Coming Soon Countdown
Published: April 17, 2025

CVE-2025-32582

7.1
    Exeideas
  • Wp Autokeyword
Published: April 17, 2025

CVE-2025-32588

7.1
    Credova
  • Credova Financial
Published: April 17, 2025

CVE-2025-32590

7.1
    Tz111
  • Web2application
Published: April 17, 2025

CVE-2025-32592

7.1
    Realmag777
  • Tableon Wordpress Posts Table Filterable
Published: April 17, 2025

CVE-2025-32602

7.1
    Aiiddqd
  • Wooms
Published: April 17, 2025

CVE-2025-32604

7.1
    Sajjad Aslani
  • Awsa Shipping
Published: April 17, 2025

CVE-2025-32605

7.1
    Expresstechsoftware
  • Memberpress Discord Addon
Published: April 17, 2025

CVE-2025-32606

7.1
    Deepak Khokhar
  • Listings For Buildium
Published: April 17, 2025

CVE-2025-32608

7.1
    Movylo
  • Movylo Marketing Automation
Published: April 17, 2025

CVE-2025-32609

7.1
    Picture-Planet Gmbh
  • Verowa Connect
Published: April 17, 2025

CVE-2025-32611

7.1
    Woocommerce
  • Tbc Credit Card Payment Gateway
Published: April 17, 2025

CVE-2025-32613

7.1
    Bowo
  • Debug Log Manager
Published: April 17, 2025

CVE-2025-32615

7.1
    Clinked
  • Clinked Client Portal
Published: April 17, 2025

CVE-2025-32620

7.1
    Doppler
  • Doppler Forms
Published: April 17, 2025

CVE-2025-32622

7.1
    Otp-Less
  • Otp-Less One Tap Sign In
Published: April 17, 2025

CVE-2025-32625

7.1
    Pootlepress
  • Mobile Pages
Published: April 17, 2025

CVE-2025-32628

7.1
    Wp Wham
  • Crowdfunding For Woocommerce
Published: April 17, 2025

CVE-2025-32630

7.1
    Cmsjunkie
  • Wp-Businessdirectory
Published: April 17, 2025

CVE-2025-32634

7.1
    Mdedev
  • Contestswp
Published: April 17, 2025

CVE-2025-32637

7.1
    Ketanajani
  • Wp Donate
Published: April 17, 2025

CVE-2025-32638

7.1
    Weptile
  • Shopapper
Published: April 17, 2025

CVE-2025-32639

7.1
    Wecantrack
  • Affiliate Links Lite
Published: April 17, 2025

CVE-2025-32646

7.1
    Pickplugins
  • Question Answer
Published: April 17, 2025

CVE-2025-32649

7.1
    Gb-Plugins
  • Gb Gallery Slideshow
Published: April 17, 2025

CVE-2025-32651

7.1
    Serpednet
  • Serped.Net
Published: April 17, 2025

CVE-2025-32653

7.1
    Lee Blue
  • Cart66 Cloud
Published: April 17, 2025

CVE-2025-32655

7.1
    Devrix
  • Restrict User Registration
Published: April 17, 2025

CVE-2025-32666

7.1
    Hive Support
  • Hive Support
Published: April 17, 2025

CVE-2025-32670

7.1
    Mark Parnell
  • Spark Gf Failed Submissions
Published: April 17, 2025

CVE-2025-32674

7.1
    Wpfactory
  • Product Excel Import Export And Bulk Edit For Woocommerce
Published: April 17, 2025

CVE-2025-39414

7.1
    Mike
  • Spam-Stopper
Published: April 17, 2025

CVE-2025-39415

7.1
    Jayesh Parejiya
  • Social Media Links
Published: April 17, 2025

CVE-2025-39416

7.1
    Ichi
  • Translit It
Published: April 17, 2025

CVE-2025-39417

7.1
    Eslam Mahmoud
  • Redirect Wordpress To Welcome Or Landing Page
Published: April 17, 2025

CVE-2025-39418

7.1
    Ajayver
  • Rss Manager
Published: April 17, 2025

CVE-2025-39419

7.1
    David Miller
  • Revision Diet
Published: April 17, 2025

CVE-2025-39420

7.1
    Ruudkok
  • Wp Twitter Button
Published: April 17, 2025

CVE-2025-39421

7.1
    Mustafa Kucuk
  • Wp Sticky Side Buttons
Published: April 17, 2025

CVE-2025-39422

7.1
    Patchstack
  • Wpsocialbookmarking
Published: April 17, 2025

CVE-2025-39423

7.1
    Jenst
  • Add To Header
Published: April 17, 2025

CVE-2025-39424

7.1
    Simplemaps
  • Simple Maps
Published: April 17, 2025

CVE-2025-39430

7.1
    Alexander Rauscha
  • Mlanguage
Published: April 17, 2025

CVE-2025-39431

7.1
    Aaron Forgue
  • Amazon Showcase Wordpress Plugin
Published: April 17, 2025

CVE-2025-39432

7.1
    Antonchanning
  • Bbpress2
Published: April 17, 2025

CVE-2025-39433

7.1
    Beke Ro
  • Bknewsticker
Published: April 17, 2025

CVE-2025-39435

7.1
    Davidfcarr
  • My Marginalia
Published: April 17, 2025

CVE-2025-39440

7.1
    Rajesh
  • Broken Links Remover
Published: April 17, 2025

CVE-2025-39441

7.1
    Swedish Boy
  • Dashboard Notepads
Published: April 17, 2025

CVE-2025-39442

7.1
    Messagemetric
  • Review Wave Google Places Reviews
Published: April 17, 2025

CVE-2025-39455

7.1
    Ip2location
  • Ip2location Variables
Published: April 17, 2025

CVE-2025-39464

7.1
    Rtowebsites
  • Adminquickbar
Published: April 17, 2025

CVE-2025-39519

7.1
    Rtpharry
  • Bulk Page Stub Creator
Published: April 17, 2025

CVE-2025-39521

7.1
    Ashish Ajani
  • Contact Form Vcard Generator
Published: April 17, 2025

CVE-2025-39558

7.1
    Crm Perks
  • Crm Perks
Published: April 17, 2025

CVE-2025-39567

7.1
    Shamalli
  • Web Directory Free
Published: April 17, 2025

CVE-2025-39583

7.1
    Berthaai
  • Bertha Ai
Published: April 17, 2025

CVE-2025-39594

7.1
    Arigato
  • Autoresponder And Newsletter
Published: April 17, 2025

CVE-2024-12530

7.0
    Opentext
  • Secure Content Manager
Published: April 17, 2025

CVE-2025-31338

6.9
    Zuso
  • Wisdom Master Pro
Published: April 17, 2025

CVE-2025-43013

6.9
    Jetbrains
  • Toolbox App
Published: April 17, 2025

CVE-2025-3762

6.9
    Pcman
  • Ftp Server
Published: April 17, 2025

CVE-2025-22340

6.5
    Think201
  • Data Dash
Published: April 17, 2025

CVE-2025-22771

6.5
    Studio Hyperset
  • The Great Fireworks Of China
Published: April 17, 2025

CVE-2025-23773

6.5
    Mingocommerce
  • Delete All Posts
Published: April 17, 2025

CVE-2025-23906

6.5
    Wpseek
  • Wordpress Dashboard Tweeter
Published: April 17, 2025

CVE-2025-23958

6.5
    Fadi Med
  • Editor Wysiwyg Background Color
Published: April 17, 2025

CVE-2025-24550

6.5
    Jobscore
  • Job Manager
Published: April 17, 2025

CVE-2025-24577

6.5
    Ays
  • Pro Poll Maker
Published: April 17, 2025

CVE-2025-24581

6.5
    Themefic
  • Instantio
Published: April 17, 2025

CVE-2025-24583

6.5
    Aa Web Servant
  • 12 Step Meeting List
Published: April 17, 2025

CVE-2025-24737

6.5
    Mat Bao Corporation
  • Wp Helper Premium
Published: April 17, 2025

CVE-2025-27283

6.5
    Rockgod100
  • Theme File Duplicator
Published: April 17, 2025

CVE-2025-27310

6.5
    Radius Of Thought
  • Page And Post Lister
Published: April 17, 2025

CVE-2025-39554

6.5
    Relywp
  • Ai Text To Speech
Published: April 17, 2025

CVE-2025-39559

6.5
    Eivin Landa
  • Fraktguiden For Woocommerce
Published: April 17, 2025

CVE-2025-28101

6.5
    Flaskblog
  • Flaskblog
Published: April 17, 2025

CVE-2025-3615

6.4
    Wordpress
  • Fluent Forms
Published: April 17, 2025

CVE-2025-3487

6.4
    Wordpress
  • Forminator Forms
Published: April 17, 2025

CVE-2025-29931

6.3
    Siemens
  • Telecontrol Server Basic
Published: April 17, 2025

CVE-2025-29722

6.3
    Commercify
  • Commercify
Published: April 17, 2025

CVE-2025-29015

6.1
    Astro
  • Internet Banking System
Published: April 17, 2025

CVE-2025-43014

6.1
    Jetbrains
  • Toolbox App
Published: April 17, 2025

CVE-2025-24651

5.9
    Webtoffee
  • Wordpress Backup Migration
Published: April 17, 2025

CVE-2025-39427

5.9
    Beth Tucker Long
  • Wp Post To Pdf Enhanced
Published: April 17, 2025

CVE-2025-39428

5.9
    Maros Pristas
  • Gravity Forms Css Themes
Published: April 17, 2025

CVE-2025-39444

5.9
    Maxfoundry
  • Maxbuttons
Published: April 17, 2025

CVE-2025-39562

5.9
    Codepeople
  • Payment Form For Paypal Pro
Published: April 17, 2025

CVE-2025-39580

5.8
    Jidaikobo
  • Dashi
Published: April 17, 2025

CVE-2025-43717

5.4
    Pear
  • Http Request2
Published: April 17, 2025

CVE-2025-39456

5.4
    Itron
  • Wplogger
Published: April 17, 2025

CVE-2025-31339

5.3
    Zuso
  • Wisdom Master Pro
Published: April 17, 2025

CVE-2025-3453

5.3
    Wordpress
  • Password Protected
Published: April 17, 2025

CVE-2025-3479

5.3
    Wordpress
  • Forminator Forms
Published: April 17, 2025

CVE-2025-27299

5.3
    Wp Asia
  • Myticket Events
Published: April 17, 2025

CVE-2025-39439

5.3
    Markus Drubba
  • Wplike2get
Published: April 17, 2025

CVE-2025-39457

5.3
    Magepeopleteam
  • Booking And Rental Manager
Published: April 17, 2025

CVE-2025-3764

5.3
    Sourcecodester
  • Web Based Pharmacy Product Management System
Published: April 17, 2025

CVE-2025-3765

5.3
    Sourcecodester
  • Web Based Pharmacy Product Management System
Published: April 17, 2025

CVE-2025-3295

4.9
    Wordpress
  • Wp Editor
Published: April 17, 2025

CVE-2025-3760

4.8
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: April 17, 2025

CVE-2025-3763

4.8
    Sourcecodester
  • Phone Management System
Published: April 17, 2025

CVE-2025-2197

4.3
    Browser
  • *
Published: April 17, 2025

CVE-2025-26477

4.3
    Dell
  • Ecs
Published: April 17, 2025

CVE-2025-39425

4.3
    Pixelgrade
  • Style Manager
Published: April 17, 2025

CVE-2025-39426

4.3
    Illow
  • Cookies Consent
Published: April 17, 2025

CVE-2025-39434

4.3
    Scott Taylor
  • Avatar
Published: April 17, 2025

CVE-2025-39437

4.3
    Boone Gorges
  • Anthologize
Published: April 17, 2025

CVE-2025-39438

4.3
    Momen2009
  • Theme Changer
Published: April 17, 2025

CVE-2025-39443

4.3
    Soft8soft
  • Verge3d
Published: April 17, 2025

CVE-2025-39453

4.3
    Algol.Plus
  • Advanced Dynamic Pricing For Woocommerce
Published: April 17, 2025

CVE-2025-42921

4.2
    Jetbrains
  • Toolbox App
Published: April 17, 2025

CVE-2024-11924

3.5
    Icegram
  • Express
    Wordpress
Published: April 17, 2025

CVE-2025-1523

3.5
    Ultimate Dashboard
  • Ultimate Dashboard
Published: April 17, 2025

CVE-2025-1524

3.5
    Ultimate Dashboard
  • Ultimate Dashboard
Published: April 17, 2025

CVE-2025-1525

3.5
    Wordpress
  • Ultimate Dashboard
Published: April 17, 2025

CVE-2025-43708

3.3
    Visicut
  • Visicut
Published: April 17, 2025

CVE-2021-47671

3.3
    Linux
  • Linux Kernel
Published: April 17, 2025

CVE-2025-26268

3.3
    Dragonflydb
  • Dragonfly
Published: April 17, 2025

CVE-2025-26269

3.3
    Dragonflydb
  • Dragonfly
Published: April 17, 2025

CVE-2025-26478

3.1
    Dell
  • Ecs
Published: April 17, 2025

CVE-2025-32415

2.9
    Gnome
  • Libxml2
Published: April 17, 2025

CVE-2024-42177

2.6
    Hcl
  • Myxalytics
Published: April 17, 2025

CVE-2024-42178

2.5
    Hcl
  • Myxalytics
Published: April 17, 2025

CVE-2024-13925

None
    Klarna
  • Klarna Checkout
Published: April 17, 2025

CVE-2025-29040

None
    Dlink
  • Dir 832x
Published: April 17, 2025

CVE-2025-29041

None
    Dlink
  • Dir 832x
Published: April 17, 2025

CVE-2025-29044

None
    Netgear
  • R61
Published: April 17, 2025

CVE-2025-29045

None
    Alfa Campro
  • Alfa Campro
Published: April 17, 2025

CVE-2025-29046

None
    Alfa
  • Wi-Fi Camppro Router
Published: April 17, 2025

CVE-2025-29047

None
    Alfa
  • Alfa Campro
Published: April 17, 2025

CVE-2024-56518

None
    Hazelcast
  • Hazelcast Management Center
Published: April 17, 2025

CVE-2025-25457

None
    Tenda
  • Ac10
Published: April 17, 2025

CVE-2025-29042

None
    Dlink
  • Dir 832x
Published: April 17, 2025

CVE-2025-29043

None
    Dlink
  • Dir-832x
Published: April 17, 2025

CVE-2024-40124

None
    Pydio
  • Pydio Core
Published: April 17, 2025

CVE-2025-29662

None
    Landchat
  • Landchat
Published: April 17, 2025

CVE-2020-36789

None
    Linux
  • Linux Kernel
Published: April 17, 2025

CVE-2024-53924

None
    Pycel
  • Pycel
Published: April 17, 2025

CVE-2025-25454

None
    Tenda
  • Ac10
Published: April 17, 2025

CVE-2025-25455

None
    Tenda
  • Ac10
Published: April 17, 2025

CVE-2025-29316

None
    Datapatrol
  • Screenshot Watermark
Published: April 17, 2025

CVE-2025-29449

None
    Twonav
  • Twonav
Published: April 17, 2025

CVE-2025-29450

None
    Twonav
  • Twonav
Published: April 17, 2025

CVE-2025-29451

None
    Seo Panel
  • Seo Panel
Published: April 17, 2025

CVE-2025-29452

None
    Seo Panel
  • Seo Panel
Published: April 17, 2025

CVE-2025-29454

None
    Personal-Management-System
  • Personal Management System
Published: April 17, 2025

CVE-2025-29455

None
    Personal-Management-System
  • Personal Management System
Published: April 17, 2025

CVE-2025-29453

None
    Personal Management System
  • Personal Management System
Published: April 17, 2025

CVE-2025-29456

None
    Personal-Management-System
  • Personal Management System
Published: April 17, 2025

CVE-2025-29457

None
    Mybb
  • Mybb
Published: April 17, 2025

CVE-2025-29458

None
    Mybb
  • Mybb
Published: April 17, 2025

CVE-2025-29459

None
    Mybb
  • Mybb
Published: April 17, 2025

CVE-2025-29460

None
    Mybb
  • Mybb
Published: April 17, 2025

CVE-2025-29461

None
    A-Blogcms
  • A-Blogcms
Published: April 17, 2025
Click here to see more Vulnerabilities