Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-22510 |
Description: Deserialization of Untrusted Data vulnerability in Konrad Karpieszuk WC Price History for Omnibus allows Object Injection.This issue affects WC Price History for Omnibus: from n/a through 2.1.4.
CVSS: HIGH (7.2) EPSS Score: 0.04%
January 10th, 2025 (3 months ago)
|
|
CVE-2025-22508 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Roninwp FAT Event Lite allows PHP Local File Inclusion.This issue affects FAT Event Lite: from n/a through 1.1.
CVSS: HIGH (8.1) EPSS Score: 0.04%
January 10th, 2025 (3 months ago)
|
|
CVE-2025-22505 |
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nabaraj Chapagain NC Wishlist for Woocommerce allows SQL Injection.This issue affects NC Wishlist for Woocommerce: from n/a through 1.0.1.
CVSS: HIGH (8.5) EPSS Score: 0.04%
January 10th, 2025 (3 months ago)
|
|
CVE-2025-22361 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Opentracker Opentracker Analytics allows Reflected XSS.This issue affects Opentracker Analytics: from n/a through 1.3.
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 10th, 2025 (3 months ago)
|
|
CVE-2025-22345 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tobias Spiess TS Comfort DB allows Reflected XSS.This issue affects TS Comfort DB: from n/a through 2.0.7.
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 10th, 2025 (3 months ago)
|
|
CVE-2025-22331 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in P3JX Cf7Save Extension allows Reflected XSS.This issue affects Cf7Save Extension: from n/a through 1.
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 10th, 2025 (3 months ago)
|
|
CVE-2025-22330 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mahesh Waghmare MG Parallax Slider allows Reflected XSS.This issue affects MG Parallax Slider: from n/a through 1.0..
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 10th, 2025 (3 months ago)
|
|
CVE-2025-22313 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Widgetize Pages Light allows Reflected XSS.This issue affects Widgetize Pages Light: from n/a through 3.0.
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 10th, 2025 (3 months ago)
|
|
CVE-2025-22307 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeAstrology Team Product Table for WooCommerce allows Reflected XSS.This issue affects Product Table for WooCommerce: from n/a through 3.5.6.
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 10th, 2025 (3 months ago)
|
|
CVE-2025-22295 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tripetto WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto allows Stored XSS.This issue affects WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto: from n/a through 8.0.5.
CVSS: HIGH (7.1) EPSS Score: 0.04%
January 10th, 2025 (3 months ago)
|