CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-22535	WordPress WPListCal Plugin <= 1.3.5 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jonathan Kern WPListCal allows SQL Injection.This issue affects WPListCal: from n/a through 1.3.5. CVSS: HIGH (8.5) EPSS Score: 0.04% Source: CVE January 10th, 2025 (5 months ago)
CVE-2025-22527	WordPress Mailing Group Listserv Plugin <= 2.0.9 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yamna Khawaja Mailing Group Listserv allows SQL Injection.This issue affects Mailing Group Listserv: from n/a through 2.0.9. CVSS: HIGH (7.6) EPSS Score: 0.04% Source: CVE January 10th, 2025 (5 months ago)
CVE-2025-22521	WordPress wp Hosting Performance Check Plugin <= 2.18.8 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Farrell wp Hosting Performance Check allows Reflected XSS.This issue affects wp Hosting Performance Check: from n/a through 2.18.8. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 10th, 2025 (5 months ago)
CVE-2025-22510	WordPress WC Price History for Omnibus plugin <= 2.1.4 - PHP Object Injection vulnerability Description: Deserialization of Untrusted Data vulnerability in Konrad Karpieszuk WC Price History for Omnibus allows Object Injection.This issue affects WC Price History for Omnibus: from n/a through 2.1.4. CVSS: HIGH (7.2) EPSS Score: 0.04% Source: CVE January 10th, 2025 (5 months ago)
CVE-2025-22508	WordPress FAT Event Lite plugin <= 1.1 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Roninwp FAT Event Lite allows PHP Local File Inclusion.This issue affects FAT Event Lite: from n/a through 1.1. CVSS: HIGH (8.1) EPSS Score: 0.04% Source: CVE January 10th, 2025 (5 months ago)
CVE-2025-22505	WordPress NC Wishlist for Woocommerce Plugin <= 1.0.1 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nabaraj Chapagain NC Wishlist for Woocommerce allows SQL Injection.This issue affects NC Wishlist for Woocommerce: from n/a through 1.0.1. CVSS: HIGH (8.5) EPSS Score: 0.04% Source: CVE January 10th, 2025 (5 months ago)
CVE-2025-22361	WordPress Opentracker Analytics Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Opentracker Opentracker Analytics allows Reflected XSS.This issue affects Opentracker Analytics: from n/a through 1.3. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 10th, 2025 (5 months ago)
CVE-2025-22345	WordPress TS Comfort DB plugin <= 2.0.7 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tobias Spiess TS Comfort DB allows Reflected XSS.This issue affects TS Comfort DB: from n/a through 2.0.7. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 10th, 2025 (5 months ago)
CVE-2025-22331	WordPress Cf7Save Extension plugin <= 1 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in P3JX Cf7Save Extension allows Reflected XSS.This issue affects Cf7Save Extension: from n/a through 1. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 10th, 2025 (5 months ago)
CVE-2025-22330	WordPress MG Parallax Slider plugin <= 1.0. - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mahesh Waghmare MG Parallax Slider allows Reflected XSS.This issue affects MG Parallax Slider: from n/a through 1.0.. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 10th, 2025 (5 months ago)