CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-25108	WordPress SW Plus Plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shalomworld SW Plus allows Reflected XSS. This issue affects SW Plus: from n/a through 2.1. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 3rd, 2025 (4 months ago)
CVE-2025-25102	WordPress Yahoo BOSS Plugin <= 0.7 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Yahoo BOSS allows Reflected XSS. This issue affects Yahoo BOSS: from n/a through 0.7. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 3rd, 2025 (4 months ago)
CVE-2025-25099	WordPress Appointment Buddy Widget By Accrete plugin <= 1.2. - Reflected Cross-Site Scripting vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in accreteinfosolution Appointment Buddy Widget allows Reflected XSS. This issue affects Appointment Buddy Widget: from n/a through 1.2. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 3rd, 2025 (4 months ago)
CVE-2025-25092	WordPress All push notification for WP plugin <= 1.5.3 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gtlwpdev All push notification for WP allows Reflected XSS. This issue affects All push notification for WP: from n/a through 1.5.3. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 3rd, 2025 (4 months ago)
CVE-2025-25090	WordPress Dreamstime Stock Photos plugin <= 4.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Dreamstime Stock Photos allows Reflected XSS. This issue affects Dreamstime Stock Photos: from n/a through 4.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 3rd, 2025 (4 months ago)
CVE-2025-25089	WordPress Image Rotator plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in appten Image Rotator allows Reflected XSS. This issue affects Image Rotator: from n/a through 2.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 3rd, 2025 (4 months ago)
CVE-2025-25087	WordPress seekXL Snapr plugin <= 2.0.6 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound seekXL Snapr allows Reflected XSS. This issue affects seekXL Snapr: from n/a through 2.0.6. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 3rd, 2025 (4 months ago)
CVE-2025-25083	WordPress EP4 More Embeds Plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound EP4 More Embeds allows Stored XSS. This issue affects EP4 More Embeds: from n/a through 1.0.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 3rd, 2025 (4 months ago)
CVE-2025-25070	WordPress Album Reviewer plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Album Reviewer allows Stored XSS. This issue affects Album Reviewer: from n/a through 2.0.2. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 3rd, 2025 (4 months ago)
CVE-2025-24758	WordPress CM Map Locations plugin <= 2.0.8 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM Map Locations allows Reflected XSS. This issue affects CM Map Locations: from n/a through 2.0.8. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 3rd, 2025 (4 months ago)