CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-32631	WordPress Oxygen MyData for WooCommerce plugin <= 1.0.63 - Arbitrary File Deletion vulnerability Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in oxygensuite Oxygen MyData for WooCommerce allows Path Traversal. This issue affects Oxygen MyData for WooCommerce: from n/a through 1.0.63. CVSS: HIGH (8.6) EPSS Score: 0.06% Source: CVE April 11th, 2025 (3 months ago)
CVE-2025-32629	WordPress WP-BusinessDirectory Plugin <= 3.1.2 - Arbitrary File Deletion vulnerability Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory allows Path Traversal. This issue affects WP-BusinessDirectory: from n/a through 3.1.2. CVSS: HIGH (8.6) EPSS Score: 0.06% Source: CVE April 11th, 2025 (3 months ago)
CVE-2025-32627	WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager allows PHP Local File Inclusion. This issue affects JS Job Manager: from n/a through 2.0.2. CVSS: HIGH (8.1) EPSS Score: 0.15% Source: CVE April 11th, 2025 (3 months ago)
CVE-2025-32618	WordPress Wishlist plugin <= 1.0.43 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins Wishlist allows SQL Injection. This issue affects Wishlist: from n/a through 1.0.43. CVSS: HIGH (8.5) EPSS Score: 0.03% Source: CVE April 11th, 2025 (3 months ago)
CVE-2025-32614	WordPress EventON plugin <= 2.3.2 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ashan Perera EventON allows PHP Local File Inclusion. This issue affects EventON: from n/a through 2.3.2. CVSS: HIGH (8.8) EPSS Score: 0.11% Source: CVE April 11th, 2025 (3 months ago)
CVE-2025-32601	WordPress Twispay Credit Card Payments Plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in twispay Twispay Credit Card Payments allows Reflected XSS. This issue affects Twispay Credit Card Payments: from n/a through 2.1.2. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE April 11th, 2025 (3 months ago)
CVE-2025-32600	WordPress Tournamatch Plugin <= 4.6.1 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tournamatch Tournamatch allows Reflected XSS. This issue affects Tournamatch: from n/a through 4.6.1. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE April 11th, 2025 (3 months ago)
CVE-2025-32599	WordPress Task Scheduler Plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in miunosoft Task Scheduler allows Reflected XSS. This issue affects Task Scheduler: from n/a through 1.6.3. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE April 11th, 2025 (3 months ago)
CVE-2025-32598	WordPress WP Table Builder plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Table Builder WP Table Builder allows Reflected XSS. This issue affects WP Table Builder: from n/a through 2.0.4. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE April 11th, 2025 (3 months ago)
CVE-2025-32589	WordPress Flexi – Guest Submit Plugin <= 4.28 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in odude Flexi – Guest Submit allows PHP Local File Inclusion. This issue affects Flexi – Guest Submit: from n/a through 4.28. CVSS: HIGH (8.1) EPSS Score: 0.15% Source: CVE April 11th, 2025 (3 months ago)