Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-22352

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes allows Blind SQL Injection.This issue affects ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes: from n/a through 1.4.8.

CVSS: HIGH (7.6)

EPSS Score: 0.04%

Source: CVE
January 8th, 2025 (3 months ago)

CVE-2025-22351

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PenguinArts Contact Form 7 Database – CFDB7 allows SQL Injection.This issue affects Contact Form 7 Database – CFDB7: from n/a through 1.0.0.

CVSS: HIGH (7.6)

EPSS Score: 0.04%

Source: CVE
January 8th, 2025 (3 months ago)

CVE-2025-22350

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpIndeed Ultimate Learning Pro allows SQL Injection.This issue affects Ultimate Learning Pro: from n/a through 3.9.

CVSS: HIGH (7.6)

EPSS Score: 0.04%

Source: CVE
January 8th, 2025 (3 months ago)

CVE-2025-22349

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Owen Cutajar & Hyder Jaffari WordPress Auction Plugin allows SQL Injection.This issue affects WordPress Auction Plugin: from n/a through 3.7.

CVSS: HIGH (7.6)

EPSS Score: 0.04%

Source: CVE
January 8th, 2025 (3 months ago)

CVE-2025-22348

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RTO GmbH DynamicTags allows Blind SQL Injection.This issue affects DynamicTags: from n/a through 1.4.0.

CVSS: HIGH (8.5)

EPSS Score: 0.04%

Source: CVE
January 8th, 2025 (3 months ago)

CVE-2025-22347

Description: Cross-Site Request Forgery (CSRF) vulnerability in BannerSky.com BSK Forms Blacklist allows Blind SQL Injection.This issue affects BSK Forms Blacklist: from n/a through 3.9.

CVSS: HIGH (8.2)

EPSS Score: 0.04%

Source: CVE
January 8th, 2025 (3 months ago)

CVE-2025-22343

Description: Cross-Site Request Forgery (CSRF) vulnerability in Dennis Koot wpSOL allows Stored XSS.This issue affects wpSOL: from n/a through 1.2.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
January 8th, 2025 (3 months ago)

CVE-2025-22342

Description: Cross-Site Request Forgery (CSRF) vulnerability in Jens Törnell WP Simple Sitemap allows Stored XSS.This issue affects WP Simple Sitemap: from n/a through 0.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
January 8th, 2025 (3 months ago)

CVE-2025-22338

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lich_wang WP-tagMaker allows Reflected XSS.This issue affects WP-tagMaker: from n/a through 0.2.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
January 8th, 2025 (3 months ago)

CVE-2025-22336

Description: Cross-Site Request Forgery (CSRF) vulnerability in WordPress 智库 Wizhi Multi Filters by Wenprise allows Stored XSS.This issue affects Wizhi Multi Filters by Wenprise: from n/a through 1.8.6.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
January 8th, 2025 (3 months ago)