CyberAlerts

CVE-2025-23760

WordPress Chatter plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Volkov Chatter allows Stored XSS. This issue affects Chatter: from n/a through 1.0.1.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

January 17th, 2025 (3 months ago)

CVE-2025-23749

WordPress mybb Last Topics plugin <= 1.0 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Mahdi Khaksar mybb Last Topics allows Stored XSS.This issue affects mybb Last Topics: from n/a through 1.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

January 17th, 2025 (3 months ago)

CVE-2025-23745

WordPress Call me Now plugin <= 1.0.5 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Tussendoor internet & marketing Call me Now allows Stored XSS.This issue affects Call me Now: from n/a through 1.0.5.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

January 17th, 2025 (3 months ago)

CVE-2025-23743

WordPress Social Analytics plugin <= 0.2 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Martijn Scheybeler Social Analytics allows Stored XSS.This issue affects Social Analytics: from n/a through 0.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

January 17th, 2025 (3 months ago)

CVE-2025-23720

WordPress Web Push plugin <= 1.4.0 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Mozilla Web Push allows Stored XSS.This issue affects Web Push: from n/a through 1.4.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

January 17th, 2025 (3 months ago)

CVE-2025-23717

WordPress Theme My Ontraport Smartform plugin <= 1.2.11 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in ITMOOTI Theme My Ontraport Smartform allows Stored XSS.This issue affects Theme My Ontraport Smartform: from n/a through 1.2.11.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

January 17th, 2025 (3 months ago)

CVE-2025-23715

WordPress Post & Page Notes plugin <= 0.1.1 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in RaymondDesign Post & Page Notes allows Stored XSS.This issue affects Post & Page Notes: from n/a through 0.1.1.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

January 17th, 2025 (3 months ago)

CVE-2025-23713

WordPress Hack me if you can plugin <= 1.2 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Artem Anikeev Hack me if you can allows Stored XSS.This issue affects Hack me if you can: from n/a through 1.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

January 17th, 2025 (3 months ago)

CVE-2025-23712

WordPress Kapost plugin <= 2.2.9 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Kapost Kapost allows Stored XSS.This issue affects Kapost: from n/a through 2.2.9.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

January 17th, 2025 (3 months ago)

CVE-2025-23710

WordPress Flying Twitter Birds plugin <= 1.8 - CSRF to Stored XSS vulnerability

Description: Cross-Site Request Forgery (CSRF) vulnerability in Mayur Sojitra Flying Twitter Birds allows Stored XSS.This issue affects Flying Twitter Birds: from n/a through 1.8.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE

January 17th, 2025 (3 months ago)

Threat and Vulnerability Intelligence Database

Example Searches: