CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-22765	WordPress WP Order By Plugin <= 1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uri Weil WP Order By allows Reflected XSS.This issue affects WP Order By: from n/a through 1.4.2. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 16th, 2025 (5 months ago)
CVE-2025-22764	WordPress WP Post Corrector Plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpwebs Team - VA Jariwala WP Post Corrector allows Reflected XSS.This issue affects WP Post Corrector: from n/a through 1.0.2. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 16th, 2025 (5 months ago)
CVE-2025-22760	WordPress CodeBard Help Desk plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeBard CodeBard Help Desk allows Reflected XSS.This issue affects CodeBard Help Desk: from n/a through 1.1.2. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 16th, 2025 (5 months ago)
CVE-2025-22755	WordPress WP Headmaster Plugin <= 0.3 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in James Bavington WP Headmaster allows Reflected XSS.This issue affects WP Headmaster: from n/a through 0.3. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 16th, 2025 (5 months ago)
CVE-2025-22754	WordPress Amber Plugin <=1.4.4 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Berkman Center for Internet & Society Amber allows Reflected XSS.This issue affects Amber: from n/a through 1.4.4. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 16th, 2025 (5 months ago)
CVE-2025-22753	WordPress turboSMTP Plugin <= 4.6 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dueclic turboSMTP allows Reflected XSS.This issue affects turboSMTP: from n/a through 4.6. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 16th, 2025 (5 months ago)
CVE-2025-22752	WordPress GSheetConnector for Forminator Forms Plugin <= 1.0.11 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GSheetConnector GSheetConnector for Forminator Forms allows Reflected XSS.This issue affects GSheetConnector for Forminator Forms: from n/a through 1.0.11. CVSS: HIGH (7.1) EPSS Score: 0.05% Source: CVE January 16th, 2025 (5 months ago)
CVE-2025-22751	WordPress Partners Plugin <= 0.2.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mighty Digital Partners allows Reflected XSS.This issue affects Partners: from n/a through 0.2.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 16th, 2025 (5 months ago)
CVE-2025-22750	WordPress Post Carousel & Slider plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tarak Patel Post Carousel & Slider allows Reflected XSS.This issue affects Post Carousel & Slider: from n/a through 1.0.4. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 16th, 2025 (5 months ago)
CVE-2025-22736	WordPress User Management plugin <= 1.2 - Privilege Escalation vulnerability Description: Incorrect Privilege Assignment vulnerability in WPExperts User Management allows Privilege Escalation.This issue affects User Management: from n/a through 1.2. CVSS: HIGH (8.8) EPSS Score: 0.04% Source: CVE January 16th, 2025 (5 months ago)