Title	CVE ID	CVSS	Vector	Date
Target Video Easy Publish <= 3.8.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution	CVE-2025-32688	5.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N	April 17, 2025
MelaPress Login Security <= 2.1.0 - Authenticated (Administrator+) PHP Object Injection	CVE-2025-39565	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	April 16, 2025
Kadence WooCommerce Email Designer <= 1.5.14 - Authenticated (Admin+) Arbitrary File Upload	CVE-2025-39557	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	April 16, 2025
Sign-up Sheets <= 2.3.0.1 - Unauthenticated Arbitrary Shortcode Execution	CVE-2025-26996	6.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N	April 15, 2025
SEO Help <= 6.6.1 - Authenticated (Admin+) Server-Side Request Forgery	CVE-2025-32675	5.5	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N	April 9, 2025
WP Inquiries <= 0.2.1 - Authenticated (Administrator+) SQL Injection	CVE-2025-32685	4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	April 9, 2025
Verowa Connect <= 3.0.5 - Authenticated (Administrator+) SQL Injection	CVE-2025-32676	4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	April 9, 2025
WP Social Stream Designer <= 1.3 - Authenticated (Administrator+) SQL Injection	CVE-2025-32677	4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	April 9, 2025
Insert or Embed Articulate Content into WordPress <= 4.3000000025 - Authenticated (Editor+) Arbitrary File Upload	CVE-2025-32202	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	April 8, 2025
Video & Photo Gallery for Ultimate Member <= 1.1.3 - Authenticated (Administrator+) SQL Injection	CVE-2025-32121	4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	April 4, 2025
bizcalendar-web <= 1.1.0.34 - Authenticated (Administrator+) SQL Injection	CVE-2025-30843	4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	March 27, 2025
MC Woocommerce Wishlist <= 1.8.9 - Authenticated (Administrator+) SQL Injection	CVE-2025-30879	4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	March 27, 2025
Product Catalog – Catalog for WordPress <= 1.0.4 - Unauthenticated SQL Injection	CVE-2025-30524	8.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N	March 25, 2025
AppExperts <= 1.4.3 - Unauthenticated Sensitive Information Exposure	CVE-2025-30609	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	March 24, 2025
Super Simple Subscriptions <= 1.1.0 - Authenticated (Administrator+) SQL Injection	CVE-2025-30523	4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	March 24, 2025
Multiple Shipping And Billing Address For Woocommerce <= 1.3 - Unauthenticated SQL Injection	CVE-2025-26875	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	March 3, 2025
Bravo Search & Replace <= 1.0 - Authenticated (Administrator+) SQL Injection	CVE-2025-27297	4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	February 24, 2025
NHR Options Table Manager <= 1.1.2 - Authenticated (Admin+) PHP Object Injection	CVE-2025-27301	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	February 24, 2025
ADFO – Custom data in admin dashboard <= 1.9.1 - Authenticated (Admin+) PHP Object Injection	CVE-2025-27300	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	February 24, 2025
CHATLIVE <= 2.0.1 - Unauthenticated SQL Injection	CVE-2025-27302	7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	February 21, 2025

Share this researcher's vulnerability discoveries

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation