CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-26583	WordPress Video Share VOD plugin <= 2.7.2 - Reflected Cross-Site Scripting vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Video Share VOD allows Reflected XSS. This issue affects Video Share VOD: from n/a through 2.7.2. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26581	WordPress Picture Gallery plugin <= 1.6.2 - CSRF to Stored XSS vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper Picture Gallery allows Reflected XSS. This issue affects Picture Gallery: from n/a through 1.6.2. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26579	WordPress MicroPayments Paid Membership plugin <= 3.1.6 - Reflected Cross-Site Scripting vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in videowhisper MicroPayments allows Reflected XSS. This issue affects MicroPayments: from n/a through 3.1.6. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26576	WordPress WP Simple Slideshow Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in takumin WP Simple Slideshow allows Reflected XSS. This issue affects WP Simple Slideshow: from n/a through 1.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26575	WordPress Display Post Meta plugin <= 1.5- Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Maurer Display Post Meta allows Reflected XSS. This issue affects Display Post Meta: from n/a through 2.4.4. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26573	WordPress Rizzi Guestbook plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Rizzi Guestbook allows Reflected XSS. This issue affects Rizzi Guestbook: from n/a through 4.0.1. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26566	WordPress In Stock Mailer for WooCommerce Plugin <= 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound In Stock Mailer for WooCommerce allows Reflected XSS. This issue affects In Stock Mailer for WooCommerce: from n/a through 2.1.1. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26565	WordPress GNUPress Plugin <= 0.2.9 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kagla GNUPress allows Reflected XSS. This issue affects GNUPress: from n/a through 0.2.9. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26564	WordPress GNUCommerce Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kagla GNUCommerce allows Reflected XSS. This issue affects GNUCommerce: from n/a through 1.5.4. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26560	WordPress WP Contact Form III Plugin <= 1.6.2d - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Contact Form III allows Reflected XSS. This issue affects WP Contact Form III: from n/a through 1.6.2d. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)