CVE-2025-30932

CVE-2025-30932 concerns WP Compress for MainWP with Missing Authorization due to misconfigured access controls. Affected versions range up to 6.30.32; Wordfence notes the issue has been patched. No exploit details are provided in the sources; no additional vectors or mitigations are specified bey...

CVE-2025-30932 WordPress WP Compress for MainWP plugin <= 6.30.32 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress for MainWP: from n/a through = 6.30.32...

CVE-2025-30932 WordPress WP Compress for MainWP plugin <= 6.30.32 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress for MainWP: from n/a through = 6.30.32...

CVE-2025-30937

CVE-2025-30937 is a Stored XSS in Responsify WP (WordPress plugin) caused by improper input neutralization during web page generation. Affected: Responsify WP versions up to 1.9.11 (and possibly from n/a). No explicit exploit details or patch information are provided in the connected documents.

CVE-2025-30937 WordPress Responsify WP plugin <= 1.9.11 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in stefanledin Responsify WP responsify-wp allows Stored XSS.This issue affects Responsify WP: from n/a through = 1.9.11...

CVE-2025-30937 WordPress Responsify WP plugin <= 1.9.11 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in stefanledin Responsify WP responsify-wp allows Stored XSS.This issue affects Responsify WP: from n/a through = 1.9.11...

CVE-2025-30950

CVE-2025-30950 is a stored XSS vulnerability in the WordPress plugin “All Currencies for WooCommerce” (WP All Currencies). The issue arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Affected versions are listed as from n/a through 2.4....

CVE-2025-30953 WordPress WP Gravity Forms Salesforce plugin <= 1.4.7 - Open Redirection Vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Phishing.This issue affects WP Gravity Forms Salesforce: from n/a through = 1.4.7...

CVE-2025-30954 WordPress WP Gravity Forms Constant Contact Plugin <= 1.1.0 - Open Redirection Vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Constant Contact Plugin gf-constant-contact allows Phishing.This issue affects WP Gravity Forms Constant Contact Plugin: from n/a through = 1.1.0...

CVE-2025-30953 WordPress WP Gravity Forms Salesforce plugin <= 1.4.7 - Open Redirection Vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Phishing.This issue affects WP Gravity Forms Salesforce: from n/a through = 1.4.7...

CVE-2025-30953

CVE-2025-30953 is an Open Redirect vulnerability in the WordPress plugin WP Gravity Forms Salesforce (also listed as gf-salesforce-crmperks). The entry states impact on versions from unspecified (n/a) up to 1.4.7 and notes the issue enables phishing via URL redirection. The connected Red Hat entr...

CVE-2025-30954

CVE-2025-30954 : Open Redirect in WP Gravity Forms Constant Contact Plugin (CRM Perks) for WordPress. Affects plugin versions 1.0.0 through 1.1.0 (n/a–1.1.0). According to the CVE entry, the vulnerability is an Open Redirect that can be abused for phishing by redirecting victims to untrusted site...

CVE-2025-30958

CVE-2025-30958 concerns a Missing Authorization vulnerability in the WordPress plugin onOffice for WP-Websites , causing broken access control due to incorrectly configured access control security levels. Affected versions are listed as n/a through 5.7 (per CVE/NVD/Red Hat), with the issue enabli...

CVE-2025-30981

CVE-2025-30981 describes a Cross-Site Request Forgery (CSRF) in the WP-Recall WordPress plugin that enables privilege escalation. Affected versions: from n/a through 16.26.14 (per initial description). The connected Red Hat advisory confirms CSRF as the root cause and privilege escalation impact ...

CVE-2025-30981 WordPress WP-Recall plugin <= 16.26.14 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in tggfref WP-Recall allows Privilege Escalation. This issue affects WP-Recall: from n/a through 16.26.14...

CVE-2025-30999 WordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Fahad Mahmood External Store for Shopify wp-shopify allows PHP Local File Inclusion.This issue affects External Store for Shopify: from n/a through = 1.5.9...

CVE-2025-30999 WordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Fahad Mahmood External Store for Shopify wp-shopify allows PHP Local File Inclusion.This issue affects External Store for Shopify: from n/a through = 1.5.9...

CVE-2025-30999

CVE-2025-30999 impacts WP Shopify (WordPress) with an authenticated/local issue: an improper control of filenames for include/require can enable PHP Local File Inclusion. The vulnerability is described as WP Shopify

CVE-2025-49332

CVE-2025-49332 (WP Time Slots Booking Form) is a CSRF vulnerability affecting WP Time Slots Booking Form versions up to 1.2.30. The CVE entry lists a CVSSv3.1 base score of 4.3 (Medium) with impact on integrity only (I:L) and no confidentiality/availability impact; exploit details are not provide...

CVE-2025-49332 WordPress WP Time Slots Booking Form <= 1.2.30 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in codepeople WP Time Slots Booking Form allows Cross Site Request Forgery. This issue affects WP Time Slots Booking Form: from n/a through 1.2.30...