{"items":[{"id":"CVE-2025-30967","published":"2025-04-15T21:53:14.550Z","updated":"2026-04-28T16:12:02.282Z","title":"WordPress WPJobBoard plugin < 5.11.1 - CSRF to Remote Code Execution (RCE) vulnerability","severity":"CRITICAL","score":9.6,"vendor":"NotFound","product":"WPJobBoard","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2025-30966","published":"2025-04-15T21:53:14.341Z","updated":"2026-04-28T16:12:02.205Z","title":"WordPress WPJobBoard plugin < 5.11.1 - Path Traversal vulnerability","severity":"MEDIUM","score":5.4,"vendor":"NotFound","product":"WPJobBoard","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2025-27008","published":"2025-04-15T21:53:13.855Z","updated":"2026-04-29T09:51:54.731Z","title":"WordPress Unlimited Timeline < 1.6.1 - Broken Access Control Vulnerability","severity":"HIGH","score":7.5,"vendor":"NotFound","product":"Unlimited Timeline","kev":false,"epss":0.00455,"kevAdded":null,"exploit":false},{"id":"CVE-2025-26730","published":"2025-04-15T21:53:09.964Z","updated":"2026-04-28T16:11:39.733Z","title":"WordPress Macro Calculator with Admin Email Optin & Data plugin <= 1.0 - Multiple Vulnerabilities vulnerability","severity":"HIGH","score":7.5,"vendor":"NotFound","product":"Macro Calculator with Admin Email Optin & Data","kev":false,"epss":0.0048,"kevAdded":null,"exploit":false},{"id":"CVE-2025-22263","published":"2025-04-15T21:53:09.352Z","updated":"2026-04-28T16:10:57.738Z","title":"WordPress Global Gallery plugin <= 8.8.0 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"NotFound","product":"Global Gallery","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false},{"id":"CVE-2025-30965","published":"2025-04-15T11:59:07.738Z","updated":"2026-04-28T16:12:02.201Z","title":"WordPress WPJobBoard plugin < 5.11.1 - Multiple Cross Site Request Forgery (CSRF) vulnerabilities vulnerability","severity":"MEDIUM","score":4.3,"vendor":"NotFound","product":"WPJobBoard","kev":false,"epss":0.00153,"kevAdded":null,"exploit":false},{"id":"CVE-2025-31409","published":"2025-04-01T05:32:24.989Z","updated":"2026-04-28T16:12:06.089Z","title":"WordPress Bridge Core plugin < 3.3.1 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"NotFound","product":"Bridge Core","kev":false,"epss":0.00297,"kevAdded":null,"exploit":false},{"id":"CVE-2025-26972","published":"2025-03-15T21:57:03.551Z","updated":"2026-04-28T16:11:45.675Z","title":"WordPress PrivateContent plugin <= 8.11.5 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"NotFound","product":"PrivateContent","kev":false,"epss":0.00228,"kevAdded":null,"exploit":false},{"id":"CVE-2025-26940","published":"2025-03-15T21:57:02.862Z","updated":"2026-04-28T16:11:44.313Z","title":"WordPress Pie Register Premium plugin <= 3.8.3.2 - Path Traversal to Non-Arbitrary File Deletion vulnerability","severity":"MEDIUM","score":6.3,"vendor":"NotFound","product":"Pie Register Premium","kev":false,"epss":0.00389,"kevAdded":null,"exploit":false},{"id":"CVE-2025-25129","published":"2025-03-03T13:30:25.081Z","updated":"2026-04-28T16:11:35.912Z","title":"WordPress Callback Request plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"NotFound","product":"Callback Request","kev":false,"epss":0.00299,"kevAdded":null,"exploit":false},{"id":"CVE-2025-26948","published":"2025-02-25T14:17:56.308Z","updated":"2026-04-28T16:11:44.804Z","title":"WordPress Pie Register Premium plugin <= 3.8.3.2 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"NotFound","product":"Pie Register Premium","kev":false,"epss":0.00307,"kevAdded":null,"exploit":false},{"id":"CVE-2025-26776","published":"2025-02-22T15:52:48.403Z","updated":"2026-04-28T16:11:40.933Z","title":"WordPress Chaty Pro Plugin <= 3.3.3 - Arbitrary File Upload vulnerability","severity":"CRITICAL","score":10,"vendor":"NotFound","product":"Chaty Pro","kev":false,"epss":0.00625,"kevAdded":null,"exploit":false},{"id":"CVE-2025-22680","published":"2025-02-16T22:17:17.355Z","updated":"2026-04-28T16:11:04.271Z","title":"WordPress Ad Inserter Pro plugin <= 2.7.39 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"NotFound","product":"Ad Inserter Pro","kev":false,"epss":0.00248,"kevAdded":null,"exploit":false},{"id":"CVE-2024-43333","published":"2025-02-03T14:23:50.050Z","updated":"2026-04-28T16:10:13.168Z","title":"WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.2.1 - Privilege Escalation vulnerability","severity":"HIGH","score":7.5,"vendor":"NotFound","product":"Admin and Site Enhancements (ASE) Pro","kev":false,"epss":0.00441,"kevAdded":null,"exploit":false},{"id":"CVE-2025-24781","published":"2025-02-03T14:22:41.732Z","updated":"2026-04-28T16:11:34.692Z","title":"WordPress WPJobBoard plugin <= 5.10.1 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"NotFound","product":"WPJobBoard","kev":false,"epss":0.00308,"kevAdded":null,"exploit":false},{"id":"CVE-2025-24744","published":"2025-01-27T14:22:19.340Z","updated":"2026-04-28T16:11:33.911Z","title":"WordPress Bridge Core plugin <= 3.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"NotFound","product":"Bridge Core","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2025-24653","published":"2025-01-27T14:22:16.514Z","updated":"2026-04-28T16:11:31.283Z","title":"WordPress Admin and Site Enhancements (ASE) Pro Plugin <= 7.6.1.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"NotFound","product":"Admin and Site Enhancements (ASE) Pro","kev":false,"epss":0.00244,"kevAdded":null,"exploit":false},{"id":"CVE-2025-22763","published":"2025-01-21T13:40:38.430Z","updated":"2026-04-28T16:11:06.729Z","title":"WordPress Brizy Pro Plugin <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"NotFound","product":"Brizy Pro","kev":false,"epss":0.00239,"kevAdded":null,"exploit":false},{"id":"CVE-2024-49333","published":"2025-01-21T13:40:32.700Z","updated":"2026-04-28T16:10:25.674Z","title":"WordPress Hero Menu plugin <= 1.16.5 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"NotFound","product":"Hero Mega Menu - Responsive WordPress Menu Plugin","kev":false,"epss":0.00377,"kevAdded":null,"exploit":false},{"id":"CVE-2024-49303","published":"2025-01-21T13:40:32.562Z","updated":"2026-04-28T16:10:24.915Z","title":"WordPress Hero Menu plugin <= 1.16.5 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"NotFound","product":"Hero Mega Menu - Responsive WordPress Menu Plugin","kev":false,"epss":0.00377,"kevAdded":null,"exploit":false},{"id":"CVE-2024-49300","published":"2025-01-21T13:40:32.331Z","updated":"2026-05-05T14:45:15.652Z","title":"WordPress Hero Menu plugin <= 1.16.5 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"NotFound","product":"Hero Mega Menu - Responsive WordPress Menu Plugin","kev":false,"epss":0.00293,"kevAdded":null,"exploit":false}]}