CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-28873	WordPress Shuffle plugin <= 0.5 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Shuffle allows Blind SQL Injection. This issue affects Shuffle: from n/a through 0.5. CVSS: HIGH (8.5) EPSS Score: 0.03% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-28869	WordPress NextGEN Gallery Voting plugin <= 2.7.6 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound NextGEN Gallery Voting allows Reflected XSS. This issue affects NextGEN Gallery Voting: from n/a through 2.7.6. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-28865	WordPress WP Colorful Tag Cloud plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lionelroux WP Colorful Tag Cloud allows Reflected XSS. This issue affects WP Colorful Tag Cloud: from n/a through 2.0.1. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-28858	WordPress Arrow Maps plugin <= 1.0.9 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arrow Plugins Arrow Maps allows Reflected XSS. This issue affects Arrow Maps: from n/a through 1.0.9. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-28855	WordPress Teleport plugin <= 1.2.4 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Teleport allows Reflected XSS. This issue affects Teleport: from n/a through 1.2.4. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-27267	WordPress Random Quotes Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in srcoley Random Quotes allows Reflected XSS. This issue affects Random Quotes: from n/a through 1.3. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-27015	WordPress Hostiko Theme < 30.1 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in designingmedia Hostiko allows PHP Local File Inclusion.This issue affects Hostiko: from n/a before 30.1. CVSS: HIGH (7.5) EPSS Score: 0.1% SSVC Exploitation: none Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-27014	WordPress Hostiko Theme < 30.1 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designingmedia Hostiko allows Reflected XSS.This issue affects Hostiko: from n/a before 30.1. CVSS: HIGH (7.1) EPSS Score: 0.04% SSVC Exploitation: none Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26986	WordPress Pearl Theme < 3.4.8 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Pearl - Corporate Business allows PHP Local File Inclusion.This issue affects Pearl - Corporate Business: from n/a before 3.4.8. CVSS: HIGH (8.1) EPSS Score: 0.13% SSVC Exploitation: none Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26584	WordPress TBTestimonials Plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound TBTestimonials allows Reflected XSS. This issue affects TBTestimonials: from n/a through 1.7.3. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)