Skip to content
OpenAdvisories

Archive

21 November 2025

Vulnerabilities first published on this day (UTC), newest first.

← October 2025 2025 / November /21 December 2025 →
  1. 133
  2. 29
  3. 361
  4. 4260
  5. 5102
  6. 6244
  7. 7119
  8. 839
  9. 97
  10. 10122
  11. 11323
  12. 12212
  13. 13154
  14. 14112
  15. 1526
  16. 1623
  17. 17128
  18. 18182
  19. 19125
  20. 2099
  21. 21163
  22. 228
  23. 2332
  24. 24104
  25. 25120
  26. 26101
  27. 2755
  28. 2843
  29. 2927
  30. 3023
All Critical High Medium Low Exploited only Public exploit

114 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-66090

    WordPress SKT Skill Bar plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Skill Bar skt-skill-bar allows DOM-Based XSS.This issue affects SKT Skill Bar: from n/a through <= 2.5.

    sonalsinha21 SKT Skill Bar
  • Medium 5.3
    CVE-2025-66077

    WordPress Legal Pages plugin <= 1.4.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wpWax Legal Pages legal-pages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Legal Pages: from n/a through <= 1.4.6.

    wpWax Legal Pages
  • Medium 4.3
    CVE-2025-66084

    WordPress FluentCommunity plugin <= 2.0.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Shahjahan Jewel FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentCommunity: from n/a through <= 2.0.0.

    Shahjahan Jewel FluentCommunity
  • Medium 5.3
    CVE-2025-66083

    WordPress WpEvently plugin <= 5.0.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through <= 5.0.4.

    MagePeople Team WpEvently
  • Medium 5.9
    CVE-2025-66081

    WordPress Head Meta Data plugin <= 20250327 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr Head Meta Data head-meta-data allows Stored XSS.This issue affects Head Meta Data: from n/a through <= 20250327.

    Jeff Starr Head Meta Data
  • Medium 5.3
    CVE-2025-66082

    WordPress WpEvently plugin <= 5.0.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in magepeopleteam WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEvently: from n/a through <= 5.0.4.

    MagePeople Team WpEvently
  • Medium 6.5
    CVE-2025-66079

    WordPress Gutenverse Form plugin <= 2.2.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Jegstudio Gutenverse Form gutenverse-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse Form: from n/a through <= 2.2.0.

    Jegstudio Gutenverse Form
  • Medium 4.3
    CVE-2025-66069

    WordPress PPOM for WooCommerce plugin <= 33.0.16 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Themeisle PPOM for WooCommerce woocommerce-product-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PPOM for WooCommerce: from n/a through <= 33.0.16.

    themeisle PPOM for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2025-66075

    WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy …

    WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent
  • Medium 5.3
    CVE-2025-66072

    WordPress UsersWP plugin <= 1.2.47 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through <= 1.2.47.

    Stiofan UsersWP
  • Medium 5.3
    CVE-2025-66071

    WordPress Custom Order Numbers for WooCommerce plugin <= 1.11.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in tychesoftwares Custom Order Numbers for WooCommerce custom-order-numbers-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Order Numbers for WooCommerce: fr…

    Tyche Softwares Custom Order Numbers for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2025-66066

    WordPress Envo Extra plugin <= 1.9.11 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EnvoThemes Envo Extra envo-extra allows Stored XSS.This issue affects Envo Extra: from n/a through <= 1.9.11.

    EnvoThemes Envo Extra
  • Medium 6.5
    CVE-2025-66067

    WordPress Funnel Builder by FunnelKit plugin <= 3.13.1.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows DOM-Based XSS.This issue affects Funnel Builder by FunnelKit: from n/a through <= 3.13.1.2.

    Aman Funnel Builder by FunnelKit
  • Medium 4.3
    CVE-2025-66064

    WordPress Giveaways and Contests by RafflePress plugin <= 1.12.20 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Cross Site Request Forgery.This issue affects Giveaways and Contests by RafflePress: from n/a through <= 1.12.20.

    Syed Balkhi Giveaways and Contests by RafflePress
  • Medium 6.5
    CVE-2025-66065

    WordPress Gutenverse plugin <= 3.2.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Jegstudio Gutenverse gutenverse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenverse: from n/a through <= 3.2.1.

    Jegstudio Gutenverse
  • Medium 5.4
    CVE-2025-66063

    WordPress WP Google Review Slider plugin <= 17.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Google Review Slider: from n/a through <= 17.4.

    jgwhite33 WP Google Review Slider
  • Medium 4.3
    CVE-2025-66061

    WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Cross Site Request Forgery.This issue affects Seriously Simple Podcasting: from n/a through <= 3.13.0.

    Craig Hewitt Seriously Simple Podcasting
  • Medium 4.3
    CVE-2025-66056

    WordPress Uncanny Automator plugin < 6.10.0 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Retrieve Embedded Sensitive Data.This issue affects Uncanny Automator: from n/a through < 6.10.0.

    Uncanny Owl Uncanny Automator
  • Medium 5.3
    CVE-2025-66060

    WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through <= 3.13.0.

    Craig Hewitt Seriously Simple Podcasting
  • Medium 5.3
    CVE-2025-66059

    WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Retrieve Embedded Sensitive Data.This issue affects Seriously Simple Podcasting: from n/a t…

    Craig Hewitt Seriously Simple Podcasting
  • Medium 6.5
    CVE-2025-66057

    WordPress Bold Page Builder plugin <= 5.5.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page-builder allows DOM-Based XSS.This issue affects Bold Page Builder: from n/a through <= 5.5.2.

    Bold Themes Bold Page Builder
  • Medium 6.5
    CVE-2025-66053

    WordPress Enfold theme <= 7.1.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kriesi Enfold enfold allows Stored XSS.This issue affects Enfold: from n/a through <= 7.1.2.

    Kriesi Enfold
  • Medium 4.3
    CVE-2025-10039

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.9 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'eh_crm_ticket_single_view_client'

    The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.9 via the 'eh_crm_ticket_single_view_client' due to missing validation on a user controlle…

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System Web / CMS
  • Medium 6.4
    CVE-2025-12935

    FluentCRM - Marketing Automation For WordPress <= 2.9.84 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fluentcrm_content' Shortcode

    The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fluentcrm_content' shortcode in all versions up to, and includi…

    techjewel FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution Web / CMS
  • Medium 4.3
    CVE-2025-10054

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Role Removal

    The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'eh_crm_remove_agent' function in all versions up to, and including, 3.3.1. This makes it …

    ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System Web / CMS
  • Medium 4.9
    CVE-2025-12750

    Groundhogg <= 4.2.6.1 - Authenticated (Admin+) SQL Injection

    The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to SQL Injection via the 'term' parameter in all versions up to, and including, 4.2.6.1 due to insufficient escaping on the user supplied parameter and lack of suff…

    trainingbusinesspros Groundhogg — CRM, Newsletters, and Marketing Automation Web / CMS
  • Medium 4.4
    CVE-2025-12066

    WP Delete Post Copies <= 6.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting

    The WP Delete Post Copies plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 6.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated att…

    etruel WP Delete Post Copies Web / CMS
  • Medium 6.4
    CVE-2025-12964

    Magical Products Display <= 1.1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via MPD Pricing Table Widget

    The Magical Products Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mpdpr_title_tag' and 'mpdpr_subtitle_tag' parameters in the MPD Pricing Table widget in all versions up to, and including, 1.1.29 due to insufficient input…

    nalam-1 Magical Shop Builder – WooCommerce Template Builder for Elementor | Shop, Cart, Checkout & Product Page Builder Web / CMS
  • Medium 6.4
    CVE-2025-11808

    Shortcode for Google Street View <= 0.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Shortcode for Google Street View plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'streetview' shortcode in all versions up to, and including, 0.5.7. This is due to insufficient input sanitization and output escaping on the 'id' a…

    antiochinteractive Shortcode for Google Street View Web / CMS
  • Medium 6.4
    CVE-2025-13141

    HT Mega – Absolute Addons For Elementor <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Tag Attribute Injection

    The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Gutenberg blocks in all versions up to, and including, 3.0.0 due to insufficient input validation on user-supplied HTML tag names. T…

    devitemsllc HT Mega Addons for Elementor – Elementor Widgets & Template Builder Web / CMS
  • Medium 4.3
    CVE-2025-13149

    Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories <= 4.9.1 - Authenticated (Author+) Missing Authorization to Post/Page Status Modification

    The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the "saveFutureActionData" function …

    publishpress Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories Web / CMS
  • Medium 6.4
    CVE-2025-11826

    WP Company Info <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The WP Company Info plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' attribute of the 'social-networks' shortcode in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping. This mak…

    bdeleasa WP Company Info Web / CMS
  • Medium 4.9
    CVE-2025-11973 Public exploit

    简数采集器 <= 2.6.3 - Authenticated (Admin+) Arbitrary File Read

    The 简数采集器 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.6.3 via the __kds_flag functionality that imports featured images. This makes it possible for authenticated attackers, with Adminstrator-level access a…

    zhengdon Web / CMS
  • Medium 6.4
    CVE-2025-11803

    WPSite Shortcode <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The WPSite Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'format' shortcode attribute in the wpsite_y shortcode and the 'before' attribute in the wpsite_postauthor shortcode in all versions up to, and including, 1.2. This…

    wpfanyi WPSite Shortcode Web / CMS
  • Medium 5.3
    CVE-2025-12039

    BigBuy Dropshipping Connector for WooCommerce <= 2.0.5 - Unauthenticated IP Spoofing to phpinfo() Exposure

    The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 2.0.5 due to insufficient IP address validation and use of user-supplied HTTP headers as a primary method for IP …

    devsmip BigBuy Dropshipping Connector for WooCommerce Web / CMS
  • Medium 6.4
    CVE-2025-11800

    Surbma | MiniCRM Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Surbma | MiniCRM Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the 'minicrm' shortcode in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output e…

    Surbma Surbma | MiniCRM Shortcode Web / CMS
  • Medium 6.4
    CVE-2025-11802

    Bulma Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Bulma Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' shortcode attribute in the bulma-notification shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output …

    bartboy011 Bulma Shortcodes Web / CMS
  • Medium 4.3
    CVE-2025-11773

    Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO <= 2.4.7 - Missing Authorization to Authenticated (Subscriber+) Contract Address Update

    The Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'saveDeployedContract' function in all versions up to, and includi…

    beycanpress Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO Web / CMS
  • Medium 6.4
    CVE-2025-11763

    Display Pages Shortcode <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Display Pages Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'column_count' parameter in the [display-pages] shortcode in all versions up to, and including, 1.1. This is due to insufficient input sanitization and outpu…

    rustybadrobot Display Pages Shortcode Web / CMS
  • Medium 6.4
    CVE-2025-11764

    Shortcodes Bootstrap <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Shortcodes Bootstrap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in the [notification] shortcode in all versions up to, and including, 1.1. This is due to missing input sanitization and output escaping. This …

    Fastmover Shortcodes Bootstrap Web / CMS