CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-24556	WordPress MooWoodle plugin <= 3.2.4 - Sensitive Data Exposure vulnerability Description: Insertion of Sensitive Information into Log File vulnerability in DualCube MooWoodle allows Retrieve Embedded Sensitive Data. This issue affects MooWoodle: from n/a through 3.2.4. CVSS: HIGH (7.5) EPSS Score: 0.04% Source: CVE February 4th, 2025 (5 months ago)
CVE-2025-24545	WordPress BSK Forms Validation plugin <= 1.7 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BannerSky.com BSK Forms Validation allows Reflected XSS. This issue affects BSK Forms Validation: from n/a through 1.7. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 4th, 2025 (5 months ago)
CVE-2025-24544	WordPress Bitcoin and Altcoin Wallets plugin <= 6.3.1 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alexandros Georgiou Bitcoin and Altcoin Wallets allows Reflected XSS. This issue affects Bitcoin and Altcoin Wallets: from n/a through 6.3.1. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 4th, 2025 (5 months ago)
CVE-2025-24541	WordPress DK White Label plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Emili Castells DK White Label allows Reflected XSS. This issue affects DK White Label: from n/a through 1.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 4th, 2025 (5 months ago)
CVE-2025-24536	WordPress ThriveDesk plugin <= 2.0.6 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThriveDesk ThriveDesk allows Reflected XSS. This issue affects ThriveDesk: from n/a through 2.0.6. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 4th, 2025 (5 months ago)
CVE-2025-23984	WordPress Dynamic URL SEO plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainvireinfo Dynamic URL SEO allows Reflected XSS. This issue affects Dynamic URL SEO: from n/a through 1.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 4th, 2025 (5 months ago)
CVE-2025-23923	WordPress Lockets Plugin <= 0.999 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Lockets allows Reflected XSS. This issue affects Lockets: from n/a through 0.999. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 4th, 2025 (5 months ago)
CVE-2025-23920	WordPress ApplicantPro Plugin <= 1.3.9 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ApplicantPro ApplicantPro allows Reflected XSS. This issue affects ApplicantPro: from n/a through 1.3.9. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 4th, 2025 (5 months ago)
CVE-2025-23819	WordPress WP Cloud plugin <= 1.4.3 - Arbitrary File Deletion vulnerability Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NotFound WP Cloud allows Absolute Path Traversal. This issue affects WP Cloud: from n/a through 1.4.3. CVSS: HIGH (7.5) EPSS Score: 0.04% Source: CVE February 4th, 2025 (5 months ago)
CVE-2025-23799	WordPress .TUBE Video Curator Plugin <= 1.1.9 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in .TUBE gTLD .TUBE Video Curator allows Reflected XSS. This issue affects .TUBE Video Curator: from n/a through 1.1.9. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 4th, 2025 (5 months ago)