Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2025-12-12
CVE-2025-13677 - Simple Download Counter Plugin
The Simple Download Counter plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.2.2. This is due to insufficient path validation in the `simple_download_counter_parse_path()` function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which may contain sensitive information such as database credentials (wp-config.php) or system files. Please note that the vendor opted to continue to allow remote file downloads from arbitrary locations on the server, however, has disabled this functionality…
PLUGIN
Simple Download Counter
CVE-2025-13677
Risk Score
Threat Entry
Updated 2025-12-12
CVE-2025-13613 - Elated Membership Plugin
The Elated Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.2. This is due to the plugin not properly logging in a user with the data that was previously verified through the 'eltdf_membership_check_facebook_user' and the 'eltdf_membership_login_user_from_social_network' function. This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the site which can easily be created by default through the temp user functionality, and access to the administrative user's email.
PLUGIN
Elated Membership
CVE-2025-13613
Risk Score
Threat Entry
Updated 2025-12-09
CVE-2025-13924 - For Woocommerce Plugin
The Advanced Product Fields (Product Addons) for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.17. This is due to missing or incorrect nonce validation on the 'maybe_duplicate' function. This makes it possible for unauthenticated attackers to duplicate and publish product field groups, including draft and pending field groups, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
PLUGIN
For Woocommerce
CVE-2025-13924
Risk Score
Threat Entry
Updated 2026-01-20
CVE-2025-67559 - Online Booking Scheduling Calendar Plugin
Missing Authorization vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through
PLUGIN
Online Booking Scheduling Calendar
CVE-2025-67559
Risk Score
Threat Entry
Updated 2026-01-20
CVE-2025-67472 - Online Booking Scheduling Calendar Plugin
Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Cross Site Request Forgery.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through
PLUGIN
Online Booking Scheduling Calendar
CVE-2025-67472
Risk Score
Threat Entry
Updated 2025-12-09
CVE-2025-13604 - Security Malware Firewall Plugin
The Login Security, FireWall, Malware removal by CleanTalk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the page URL in all versions up to, and including, 2.168 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Security Malware Firewall
CVE-2025-13604
Risk Score
Threat Entry
Updated 2026-01-09
CVE-2025-13071 - Custom Admin Menu Plugin
The Custom Admin Menu WordPress plugin through 1.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
PLUGIN
Custom Admin Menu
CVE-2025-13071
Risk Score
Threat Entry
Updated 2026-01-09
CVE-2025-13070 - Csv To Sorttable Plugin
The CSV to SortTable WordPress plugin through 4.2 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as contributor to perform LFI attacks.
PLUGIN
Csv To Sorttable
CVE-2025-13070
Risk Score
Threat Entry
Updated 2025-12-09
CVE-2025-13642 - Wp User Avatar Plugin
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.16.7 due to insufficient input sanitization on the `type` parameter in the form preview functionality. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes via the `pp_preview_form` endpoint.
PLUGIN
Wp User Avatar
CVE-2025-13642
Risk Score
Threat Entry
Updated 2025-12-09
CVE-2025-12705 - Fb Reviews Widget Plugin
The Social Reviews & Recommendations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in the 'trim_text' function in all versions up to, and including, 2.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 2.5.
PLUGIN
Fb Reviews Widget
CVE-2025-12705
Risk Score
Threat Entry
Updated 2025-12-12
CVE-2025-13031 - Wpematico Rss Feed Fetcher Plugin
The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.13 does not sanitize and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks
PLUGIN
Wpematico Rss Feed Fetcher
CVE-2025-13031
Risk Score
Threat Entry
Updated 2025-12-11
CVE-2025-12558 - Beaver Builder Plugin
The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via the 'get_attachment_sizes' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the path and meta data of private attachments, which can be used to view the attachments.
PLUGIN
Beaver Builder
CVE-2025-12558
Risk Score
Threat Entry
Updated 2025-12-08
CVE-2025-13065 - Starter Templates Plugin
The Starter Templates plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 4.4.41. This is due to insufficient file type validation detecting WXR files, allowing double extension files to bypass sanitization while being accepted as a valid WXR file. This makes it possible for authenticated attackers, with author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
PLUGIN
Starter Templates
CVE-2025-13065
Risk Score
Threat Entry
Updated 2025-12-08
CVE-2025-12966 - All In One Video Gallery Plugin
The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the resolve_import_directory() function in versions 4.5.4 to 4.5.7. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
PLUGIN
All In One Video Gallery
CVE-2025-12966
Risk Score
Threat Entry
Updated 2025-12-08
CVE-2025-12499 - Rich Shortcodes For Google Reviews Plugin
The Rich Shortcodes for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the contents of a Google Review in all versions up to, and including, 6.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: This vulnerability was partially patched in version 6.6.2.
PLUGIN
Rich Shortcodes For Google Reviews
CVE-2025-12499
Risk Score
Threat Entry
Updated 2025-12-08
CVE-2025-13748 - Conversational Form Builder Plugin
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.1.7 via the 'submission_id' parameter due to missing validation on a user controlled key within the confirmScaPayment() function. This makes it possible for unauthenticated attackers to mark arbitrary submissions as failed via crafted requests to the endpoint granted they can guess or enumerate a valid submission identifier.
PLUGIN
Conversational Form Builder
CVE-2025-13748
Risk Score
Threat Entry
Updated 2025-12-11
CVE-2025-13377 - 10web Booster Plugin
The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the get_cache_dir_for_page_from_url() function in all versions up to, and including, 2.32.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary folders on the server, which can easily lead to a loss of data or a denial of service condition.
PLUGIN
10web Booster
CVE-2025-13377
Risk Score
Threat Entry
Updated 2025-12-08
CVE-2025-13907 - Css3 Buttons Plugin
The CSS3 Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Css3 Buttons
CVE-2025-13907
Risk Score
Threat Entry
Updated 2025-12-08
CVE-2025-13899 - Tr Timthumb Plugin
The TR Timthumb plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attributes in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Tr Timthumb
CVE-2025-13899
Risk Score
Threat Entry
Updated 2025-12-08
CVE-2025-13898 - Ultra Skype Button Plugin
The Ultra Skype Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btn_id' parameter of the [ultra_skype] shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Ultra Skype Button
CVE-2025-13898
Risk Score