| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-26743 | WordPress Advance WP Query Search Filter plugin <= 1.0.10 - Reflected Cross Site Scripting (XSS) vulnerability | TC.K | Advance WP Query Search Filter | High | 7.1 | 2025-04-15 11:59:05 | Deep Dive |
| CVE-2025-32585 | WordPress Shop Products Filter Plugin <= 1.2 - Local File Inclusion vulnerability | Trusty Plugins | Shop Products Filter | High | 7.5 | 2025-04-11 08:42:58 | Deep Dive |
| CVE-2025-32175 | WordPress VK Filter Search plugin <= 2.20.2 - Cross Site Scripting (XSS) vulnerability | Vektor,Inc. | VK Filter Search | Medium | 6.5 | 2025-04-04 15:58:54 | Deep Dive |
| CVE-2025-2317 | Product Filter by WBW <= 2.7.9 - Unauthenticated SQL Injection via filtersDataBackend Parameter | woobewoo | Product Filter for WooCommerce by WBW | High | 7.5 | 2025-04-04 05:22:43 | Deep Dive |
| CVE-2025-31687 | SpamSpan filter - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-016 | Drupal | SpamSpan filter | 中危 | - | 2025-03-31 21:44:50 | Deep Dive |
| CVE-2025-22648 | WordPress Blog, Posts and Category Filter for Elementor plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability | Plugin Devs | Blog, Posts and Category Filter for Elementor | Medium | 6.5 | 2025-03-27 15:06:30 | Deep Dive |
| CVE-2025-30584 | WordPress AlphaOmega Captcha & Anti-Spam Filter plugin <= 3.3 - CSRF to Stored XSS Vulnerability | alphaomegaplugins | AlphaOmega Captcha & Anti-Spam Filter | High | 7.1 | 2025-03-24 13:47:12 | Deep Dive |
| CVE-2025-1528 | Search and filter pro <= 2.5.19 - Missing Authorization to Authenticated (Subscriber+) Post Meta Exposure | Search & Filter | Search & Filter Pro | Medium | 4.3 | 2025-03-14 04:22:33 | Deep Dive |
| CVE-2025-28867 | WordPress Frontpage category filter plugin <= 1.0.2 - Cross Site Request Forgery (CSRF) vulnerability | stesvis | Frontpage category filter | Medium | 4.3 | 2025-03-11 21:00:37 | Deep Dive |
| CVE-2025-1661 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion | realmag777 | HUSKY – Products Filter Professional for WooCommerce | Critical | 9.8 | 2025-03-11 03:22:19 | Deep Dive |
| CVE-2025-23555 | WordPress Ui Slider Filter By Price plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability | chenyenming | Ui Slider Filter By Price | High | 7.1 | 2025-03-03 13:30:12 | Deep Dive |
| CVE-2024-13148 | SQLi in Yukseloglu Filter's B2B Login Platform | Yukseloglu Filter | B2B Login Platform | Critical | 9.8 | 2025-02-27 14:22:58 | Deep Dive |
| CVE-2025-23788 | WordPress Easy Filter Plugin <= 1.10 - Reflected Cross Site Scripting (XSS) vulnerability | Roni Saha | Easy Filter | High | 7.1 | 2025-02-14 12:44:33 | Deep Dive |
| CVE-2025-26562 | WordPress RSS FIlter Plugin <= 1.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability | Shambhu Patnaik | RSS Filter | High | 7.1 | 2025-02-13 13:52:55 | Deep Dive |
| CVE-2024-13583 | Simple Gallery with Filter <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | jitendra742744 | Simple Gallery with Filter | Medium | 6.4 | 2025-01-24 09:21:51 | Deep Dive |
| CVE-2024-13340 | MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting | realmag777 | MDTF – Meta Data and Taxonomies Filter | Medium | 6.4 | 2025-01-23 11:13:30 | Deep Dive |
| CVE-2025-23926 | WordPress Ajax WP Query Search Filter plugin <= 1.0.7 - Stored Cross Site Scripting (XSS) vulnerability | TC.K | Ajax WP Query Search Filter | Medium | 6.5 | 2025-01-16 20:07:53 | Deep Dive |
| CVE-2024-11642 | Post Grid Master <= 3.4.12 - Missing Authorization to Unauthenticated Local PHP File Inclusion | mdshuvo | Post Grid Master — Post Grids & AJAX Filters | Critical | 9.8 | 2025-01-09 11:11:04 | Deep Dive |
| CVE-2024-12030 | MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection | realmag777 | MDTF – Meta Data and Taxonomies Filter | Medium | 6.5 | 2025-01-08 04:17:59 | Deep Dive |
| CVE-2025-22355 | WordPress Kikx Simple Post Author Filter plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability | asokaaso2 | Kikx Simple Post Author Filter | High | 7.1 | 2025-01-07 10:48:37 | Deep Dive |