Title	CVE ID	CVSS	Vector	Date
Auto Last Youtube Video <= 1.0.7 - Cross-Site Request Forgery	CVE-2025-58843	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	September 5, 2025
Printeers Print & Ship <= 1.17.0 - Missing Authorization	CVE-2025-52766	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N	August 29, 2025
Quick Contact Form <= 8.2.1 - Reflected Cross-Site Scripting	CVE-2025-48245	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	May 29, 2025
UltraAddons <= 2.0.0 - Cross-Site Request Forgery	CVE-2025-32264	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	April 4, 2025
404 Image Redirection (Replace Broken Images) <= 1.4 - Cross-Site Request Forgery	CVE-2025-32266	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	April 4, 2025
Freetobook Responsive Widget <= 1.1 - Cross-Site Request Forgery	CVE-2025-32273	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	April 4, 2025
Woocommerce Role Pricing <= 3.5.5 - Cross-Site Request Forgery	CVE-2025-32271	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	April 4, 2025
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.3 - Cross-Site Request Forgery	CVE-2025-32269	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	April 4, 2025
QR Code Tag for WC order emails <= 1.9.36 - Cross-Site Request Forgery	CVE-2025-32268	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	April 4, 2025
Broadstreet <= 1.51.1 - Cross-Site Request Forgery	CVE-2025-32270	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	April 4, 2025
Browser Caching with .htaccess 1.2.1 - Cross-Site Request Forgery	CVE-2025-31439	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 28, 2025
Exchange Rates <= 1.2.2 - Missing Authorization	CVE-2025-30864	4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N	March 27, 2025
Anthologize <= 0.8.2 - Cross-Site Request Forgery	CVE-2025-30823	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 27, 2025
Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.0.9 - Cross-Site Request Forgery	CVE-2025-30863	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 27, 2025
Custom Login Logo <= 1.1.7 - Cross-Site Request Forgery	CVE-2025-30822	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 27, 2025
Custom Fields Account Registration For Woocommerce <= 1.1 - Cross-Site Request Forgery	CVE-2025-30888	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 27, 2025
Currency Switcher for WooCommerce <= 0.0.7 - Cross-Site Request Forgery	CVE-2025-30857	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 27, 2025
Football Pool <= 2.12.2 - Cross-Site Request Forgery to Settings Update	CVE-2025-30764	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 26, 2025
CAS Maestro <= 1.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting	CVE-2025-30561	6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	March 24, 2025
Fix Rss Feeds <= 3.1 - Cross-Site Request Forgery	CVE-2025-30556	4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N	March 24, 2025

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation