| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-32561 | WordPress WP_DEBUG Toggle plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability | plugins.club | WP_DEBUG Toggle | High | 7.1 | 2025-04-17 15:47:30 | Deep Dive |
| CVE-2025-32630 | WordPress WP-BusinessDirectory Plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability | CMSJunkie - WordPress Business Directory Plugins | WP-BusinessDirectory | High | 7.1 | 2025-04-17 15:47:12 | Deep Dive |
| CVE-2025-32649 | WordPress GB Gallery Slideshow Plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability | gb-plugins | GB Gallery Slideshow | High | 7.1 | 2025-04-17 15:47:06 | Deep Dive |
| CVE-2025-39517 | WordPress Basic Interactive World Map plugin <= 2.7 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability | WP Map Plugins | Basic Interactive World Map | Medium | 4.3 | 2025-04-16 12:45:51 | Deep Dive |
| CVE-2025-39547 | WordPress Internal Link Optimiser plugin <= 5.1.3 - CSRF to XSS vulnerability | Toast Plugins | Internal Link Optimiser | High | 7.1 | 2025-04-16 12:44:38 | Deep Dive |
| CVE-2025-32629 | WordPress WP-BusinessDirectory Plugin <= 3.1.2 - Arbitrary File Deletion vulnerability | CMSJunkie - WordPress Business Directory Plugins | WP-BusinessDirectory | High | 8.6 | 2025-04-11 08:43:01 | Deep Dive |
| CVE-2025-32585 | WordPress Shop Products Filter Plugin <= 1.2 - Local File Inclusion vulnerability | Trusty Plugins | Shop Products Filter | High | 7.5 | 2025-04-11 08:42:58 | Deep Dive |
| CVE-2025-32243 | WordPress Internal Link Optimiser plugin <= 5.1.2 - Settings Change vulnerability | Toast Plugins | Internal Link Optimiser | Medium | 6.5 | 2025-04-10 08:09:47 | Deep Dive |
| CVE-2025-32661 | WordPress Interactive US Map plugin <= 2.7 - CSRF to Stored XSS vulnerability | WP Map Plugins | Interactive US Map | High | 7.1 | 2025-04-09 16:09:20 | Deep Dive |
| CVE-2025-31477 | Improper Scope Validation in the open Endpoint of tauri-plugin-shell | tauri-apps | plugins-workspace | - | - | 2025-04-02 21:10:14 | Deep Dive |
| CVE-2025-31086 | WordPress Product Table by WBW plugin <= 2.1.4 - Reflected Cross Site Scripting (XSS) vulnerability | WBW Plugins | Product Table by WBW | High | 7.1 | 2025-04-01 20:58:09 | Deep Dive |
| CVE-2025-31897 | WordPress Arrow Custom Feed for Twitter plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability | Arrow Plugins | Arrow Custom Feed for Twitter | Medium | 6.5 | 2025-04-01 14:52:23 | Deep Dive |
| CVE-2025-31824 | WordPress WP Optin Wheel Plugin <= 1.4.7 - Server Side Request Forgery (SSRF) vulnerability | Wombat Plugins | WP Optin Wheel | Medium | 5.4 | 2025-04-01 14:51:48 | Deep Dive |
| CVE-2025-31732 | WordPress GB Gallery Slideshow plugin <= 1.3 - Broken Access Control vulnerability | gb-plugins | GB Gallery Slideshow | Medium | 4.3 | 2025-04-01 14:51:02 | Deep Dive |
| CVE-2025-30820 | WordPress WishSuite plugin <= 1.4.4 - Local File Inclusion Vulnerability | HT Plugins | WishSuite | High | 7.5 | 2025-03-27 10:55:08 | Deep Dive |
| CVE-2025-28858 | WordPress Arrow Maps plugin <= 1.0.9 - Reflected Cross Site Scripting (XSS) vulnerability | Arrow Plugins | Arrow Maps | - | - | 2025-03-26 14:24:22 | Deep Dive |
| CVE-2024-13321 | AnalyticsWP <= 2.0.0 - Unauthenticated SQL Injection | Solid Plugins | AnalyticsWP | High | 7.5 | 2025-03-14 07:23:21 | Deep Dive |
| CVE-2025-2250 | WordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins <= 2.32 - Authenticated (Admin+) SQL Injection | sminozzi | ReportAttacks — Brute Force & Login Protection | Medium | 4.9 | 2025-03-13 03:21:02 | Deep Dive |
| CVE-2025-28887 | WordPress Plugins Last Updated Column plugin <= 0.1.3 - Cross Site Request Forgery (CSRF) vulnerability | Fastmover | Plugins Last Updated Column | Medium | 4.3 | 2025-03-11 21:00:47 | Deep Dive |
| CVE-2024-13781 | Hero Maps Premium - Customizable Google Maps Plugin <= 2.3.9 - Authenticated (Subscriber+) SQL Injection | Hero Plugins | Hero Maps Premium | Medium | 6.5 | 2025-03-07 08:21:26 | Deep Dive |