Wordfence Intelligence Weekly WordPress Vulnerability Report (January 20, 2025 to January 26, 2025)

🗓️ 30 Jan 2025 16:04:18Reported by Chloe ChamberlandType

wordfence🔗 www.wordfence.com👁 163 Views

Last week, 212 vulnerabilities reported in WordPress plugins and themes. Access vulnerability data for safety.

Reporter	Title	Published	Views	Family All 1000
GithubExploit	Exploit for CVE-2025-24587	31 Jan 202500:54	–	githubexploit
GithubExploit	Exploit for CVE-2025-24659	31 Jan 202501:01	–	githubexploit
GithubExploit	Exploit for CVE-2025-24001	24 Aug 202603:04	–	githubexploit
attackerkb	CVE-2025-23662	16 Jan 202520:15	–	attackerkb
BDU FSTEC	The vulnerability of the ABC Notation plugin for WordPress’ content management system arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain unauthorized access to protected information.	26 Mar 202500:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the Premium Package: Selling Digital Products securely through the WordPress content management system. This vulnerability is related to the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.	26 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Quiz Maker plugin of the WordPress content management system, related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL code.	26 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the aysavegoogle_credentials() function in the Quiz Maker plugin of the WordPress content management system allows a hacker to gain unauthorized access to protected information and perform cross-site scripting attacks.	26 May 202500:00	–	bdu_fstec
Circl	CVE-2024-10324	24 Jan 202513:42	–	circl
Circl	CVE-2024-10552	25 Jan 202506:46	–	circl

30 Jan 2025 16:04Current

10Critical risk

Vulners AI Score10

CVSS 3.19.9

EPSS0.32237

SSVC

wordpress vulnerabilities bug bounty program vulnerability database vulnerability reports security scanning