CyberAlerts

CVE-2025-39403

WordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerability

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPAMS allows SQL Injection.This issue affects WPAMS: from n/a through 44.0 (17-08-2023).

CVSS: HIGH (8.5)

EPSS Score: 0.03%

Source: CVE

May 19th, 2025 (19 days ago)

CVE-2025-39393

WordPress Hospital Management System plugin <= 47.0 (20-11-2023) - Cross Site Scripting (XSS) vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla Hospital Management System allows Reflected XSS.This issue affects Hospital Management System: from n/a through 47.0 (20-11-2023).

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

May 19th, 2025 (19 days ago)

CVE-2025-39392

WordPress WPAMS plugin <= 44.0 (17-08-2023) - Cross Site Scripting (XSS) vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla WPAMS allows Reflected XSS.This issue affects WPAMS: from n/a through 44.0 (17-08-2023).

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

May 19th, 2025 (19 days ago)

CVE-2025-39372

WordPress WordPress Events Calendar Registration & Tickets plugin <= 2.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in elbisnero WordPress Events Calendar Registration & Tickets allows Reflected XSS.This issue affects WordPress Events Calendar Registration & Tickets: from n/a through 2.6.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

May 19th, 2025 (19 days ago)

CVE-2025-39366

WordPress wProject theme < 5.8.0 - Subscriber+ Privilege Escalation vulnerability

Description: Incorrect Privilege Assignment vulnerability in Rocket Apps wProject.This issue affects wProject: from n/a before 5.8.0.

CVSS: HIGH (8.8)

EPSS Score: 0.04%

Source: CVE

May 19th, 2025 (19 days ago)

CVE-2025-39365

WordPress wProject theme < 5.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rocket Apps wProject allows Reflected XSS.This issue affects wProject: from n/a before 5.8.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

May 19th, 2025 (19 days ago)

CVE-2025-39357

WordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerability

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla Hospital Management System allows SQL Injection.This issue affects Hospital Management System: from n/a through 47.0(20-11-2023).

CVSS: HIGH (8.5)

EPSS Score: 0.03%

Source: CVE

May 19th, 2025 (19 days ago)

CVE-2025-39355

WordPress FAT Services Booking plugin <= 5.6 - SQL Injection vulnerability

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in roninwp FAT Services Booking allows SQL Injection.This issue affects FAT Services Booking: from n/a through 5.6.

CVSS: HIGH (8.5)

EPSS Score: 0.03%

Source: CVE

May 19th, 2025 (19 days ago)

CVE-2025-39352

WordPress Grand Restaurant WordPress theme <= 7.0 - Arbitrary Options Deletion vulnerability

Description: Missing Authorization vulnerability in ThemeGoods Grand Restaurant WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Restaurant WordPress: from n/a through 7.0.

CVSS: HIGH (8.2)

EPSS Score: 0.05%

Source: CVE

May 19th, 2025 (19 days ago)

CVE-2025-39350

WordPress wProject theme < 5.8.0 - Unauthenticated Post/Comment/Attachment Modification/Deletion vulnerability

Description: Missing Authorization vulnerability in Rocket Apps wProject.This issue affects wProject: from n/a before 5.8.0.

CVSS: HIGH (8.2)

EPSS Score: 0.05%

Source: CVE

May 19th, 2025 (19 days ago)

Threat and Vulnerability Intelligence Database

Example Searches: