CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-39409	WordPress WordPress Video Robot - The Ultimate Video Importer plugin <= 1.20.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pressaholic WordPress Video Robot - The Ultimate Video Importer.This issue affects WordPress Video Robot - The Ultimate Video Importer: from n/a through 1.20.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE May 19th, 2025 (28 days ago)
CVE-2025-39407	WordPress Memberpress plugin <= 1.11.37 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Caseproof, LLC Memberpress allows Reflected XSS.This issue affects Memberpress: from n/a through 1.11.37. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE May 19th, 2025 (28 days ago)
CVE-2025-39405	WordPress WPAMS plugin <= 44.0 (17-08-2023) - Privilege Escalation vulnerability Description: Incorrect Privilege Assignment vulnerability in mojoomla WPAMS allows Privilege Escalation.This issue affects WPAMS: from n/a through 44.0 (17-08-2023). CVSS: HIGH (8.8) EPSS Score: 0.04% Source: CVE May 19th, 2025 (28 days ago)
CVE-2025-39403	WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPAMS allows SQL Injection.This issue affects WPAMS: from n/a through 44.0 (17-08-2023). CVSS: HIGH (8.5) EPSS Score: 0.03% Source: CVE May 19th, 2025 (28 days ago)
CVE-2025-39393	WordPress Hospital Management System plugin <= 47.0 (20-11-2023) - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla Hospital Management System allows Reflected XSS.This issue affects Hospital Management System: from n/a through 47.0 (20-11-2023). CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE May 19th, 2025 (28 days ago)
CVE-2025-39392	WordPress WPAMS plugin <= 44.0 (17-08-2023) - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla WPAMS allows Reflected XSS.This issue affects WPAMS: from n/a through 44.0 (17-08-2023). CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE May 19th, 2025 (28 days ago)
CVE-2025-39372	WordPress WordPress Events Calendar Registration & Tickets plugin <= 2.6.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in elbisnero WordPress Events Calendar Registration & Tickets allows Reflected XSS.This issue affects WordPress Events Calendar Registration & Tickets: from n/a through 2.6.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE May 19th, 2025 (28 days ago)
CVE-2025-39366	WordPress wProject theme < 5.8.0 - Subscriber+ Privilege Escalation vulnerability Description: Incorrect Privilege Assignment vulnerability in Rocket Apps wProject.This issue affects wProject: from n/a before 5.8.0. CVSS: HIGH (8.8) EPSS Score: 0.04% Source: CVE May 19th, 2025 (28 days ago)
CVE-2025-39365	WordPress wProject theme < 5.8.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rocket Apps wProject allows Reflected XSS.This issue affects wProject: from n/a before 5.8.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE May 19th, 2025 (28 days ago)
CVE-2025-39357	WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla Hospital Management System allows SQL Injection.This issue affects Hospital Management System: from n/a through 47.0(20-11-2023). CVSS: HIGH (8.5) EPSS Score: 0.03% Source: CVE May 19th, 2025 (28 days ago)