CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-23798	WordPress Mass Messaging in BuddyPress Plugin <= 2.2.1 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eliott Robson Mass Messaging in BuddyPress allows Reflected XSS. This issue affects Mass Messaging in BuddyPress: from n/a through 2.2.1. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23784	WordPress Contact Form 7 Round Robin Lead Distribution Plugin <= 1.2.1 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Contact Form 7 Round Robin Lead Distribution allows SQL Injection. This issue affects Contact Form 7 Round Robin Lead Distribution: from n/a through 1.2.1. CVSS: HIGH (7.6) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23781	WordPress WM Options Import Export plugin <= 1.0.1 - Sensitive Data Exposure vulnerability Description: Insertion of Sensitive Information Into Sent Data vulnerability in NotFound WM Options Import Export allows Retrieve Embedded Sensitive Data. This issue affects WM Options Import Export: from n/a through 1.0.1. CVSS: HIGH (7.5) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23774	WordPress WPDB to Sql plugin <= 1.2 - Sensitive Data Exposure vulnerability Description: Insertion of Sensitive Information Into Sent Data vulnerability in NotFound WPDB to Sql allows Retrieve Embedded Sensitive Data. This issue affects WPDB to Sql: from n/a through 1.2. CVSS: HIGH (7.5) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23770	WordPress Fast Tube plugin <= 2.3.1 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Fast Tube allows Reflected XSS. This issue affects Fast Tube: from n/a through 2.3.1. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23769	WordPress Content Mirror plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Content Mirror allows Reflected XSS. This issue affects Content Mirror: from n/a through 1.2. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23768	WordPress InFunding plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound InFunding allows Reflected XSS. This issue affects InFunding: from n/a through 1.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23758	WordPress pootle button plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Pootle button allows Reflected XSS. This issue affects Pootle button: from n/a through 1.2.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23746	WordPress CMC MIGRATE plugin <= 0.0.3 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound CMC MIGRATE allows Reflected XSS. This issue affects CMC MIGRATE: from n/a through 0.0.3. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23732	WordPress Easy Filtering plugin <= 2.5.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Easy Filtering allows Reflected XSS. This issue affects Easy Filtering: from n/a through 2.5.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)