Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-39480 |
Description: Deserialization of Untrusted Data vulnerability in ThemeMakers Car Dealer allows Object Injection. This issue affects Car Dealer: from n/a through 1.6.6.
CVSS: CRITICAL (9.8) EPSS Score: 0.05%
May 23rd, 2025 (15 days ago)
|
|
CVE-2025-32292 |
Description: Deserialization of Untrusted Data vulnerability in AncoraThemes Jarvis – Night Club, Concert, Festival WordPress allows Object Injection. This issue affects Jarvis – Night Club, Concert, Festival WordPress: from n/a through 1.8.11.
CVSS: CRITICAL (9.8) EPSS Score: 0.05%
May 23rd, 2025 (15 days ago)
|
|
CVE-2025-31927 |
Description: Deserialization of Untrusted Data vulnerability in themeton Acerola allows Object Injection. This issue affects Acerola: from n/a through 1.6.5.
CVSS: CRITICAL (9.8) EPSS Score: 0.05%
May 23rd, 2025 (15 days ago)
|
|
CVE-2025-31918 |
Description: Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro allows Privilege Escalation. This issue affects Simple Business Directory Pro: from n/a through 15.4.8.
CVSS: CRITICAL (9.8) EPSS Score: 0.05%
May 23rd, 2025 (15 days ago)
|
|
CVE-2025-31916 |
Description: Unrestricted Upload of File with Dangerous Type vulnerability in joy2012bd JP Students Result Management System Premium allows Upload a Web Shell to a Web Server. This issue affects JP Students Result Management System Premium: from 1.1.7 through n/a.
CVSS: CRITICAL (9.0) EPSS Score: 0.06%
May 23rd, 2025 (15 days ago)
|
|
CVE-2025-31914 |
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder allows Blind SQL Injection. This issue affects Pixel WordPress Form BuilderPlugin & Autoresponder: from n/a through 1.0.2.
CVSS: CRITICAL (9.3) EPSS Score: 0.04%
May 23rd, 2025 (15 days ago)
|
|
CVE-2025-31631 |
Description: Deserialization of Untrusted Data vulnerability in AncoraThemes Fish House allows Object Injection. This issue affects Fish House: from n/a through 1.2.7.
CVSS: CRITICAL (9.8) EPSS Score: 0.05%
May 23rd, 2025 (15 days ago)
|
|
CVE-2025-31430 |
Description: Deserialization of Untrusted Data vulnerability in themeton The Business allows Object Injection. This issue affects The Business: from n/a through 1.6.1.
CVSS: CRITICAL (9.8) EPSS Score: 0.05%
May 23rd, 2025 (15 days ago)
|
|
CVE-2025-31423 |
Description: Deserialization of Untrusted Data vulnerability in AncoraThemes Umberto allows Object Injection. This issue affects Umberto: from n/a through 1.2.8.
CVSS: CRITICAL (9.8) EPSS Score: 0.05%
May 23rd, 2025 (15 days ago)
|
|
CVE-2025-31397 |
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in smartcms Bus Ticket Booking with Seat Reservation for WooCommerce allows SQL Injection. This issue affects Bus Ticket Booking with Seat Reservation for WooCommerce: from n/a through 1.7.
CVSS: CRITICAL (9.3) EPSS Score: 0.04%
May 23rd, 2025 (15 days ago)
|