Skip to content
SScott Reilly
Exploited and recent CVEs
-
CVE-2025-49386
High 8.8
WordPress Preserve Code Formatting Plugin <= 4.0.1 - PHP Object Injection Vulnerability
0.5%
-
CVE-2025-23878
Medium 5.9
WordPress Post-to-Post Links plugin <= 4.2 - Cross Site Scripting (XSS) vulnerability
0.4%
-
CVE-2024-27192
High 7.1
WordPress Configure SMTP Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)
0.4%
-
CVE-2022-45360
Medium 4.7
WordPress Commenter Emails Plugin <= 2.6.1 is vulnerable to CSV Injection
0.6%
-
CVE-2023-45604
Medium 5.9
WordPress Get Custom Field Values Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS)
0.4%