Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-30924 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in primersoftware Primer MyData for Woocommerce allows Reflected XSS. This issue affects Primer MyData for Woocommerce: from n/a through n/a.
CVSS: HIGH (7.1) EPSS Score: 0.04%
April 1st, 2025 (21 days ago)
|
|
CVE-2025-30917 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham SKU Generator for WooCommerce allows Reflected XSS. This issue affects SKU Generator for WooCommerce: from n/a through 1.6.2.
CVSS: HIGH (7.1) EPSS Score: 0.04%
April 1st, 2025 (21 days ago)
|
|
CVE-2025-30910 |
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CreativeMindsSolutions CM Download Manager allows Path Traversal. This issue affects CM Download Manager: from n/a through 2.9.6.
CVSS: HIGH (8.6) EPSS Score: 0.06%
April 1st, 2025 (21 days ago)
|
|
CVE-2025-30902 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ATL Software SRL AEC Kiosque allows Reflected XSS. This issue affects AEC Kiosque: from n/a through 1.9.3.
CVSS: HIGH (7.1) EPSS Score: 0.04%
April 1st, 2025 (21 days ago)
|
|
CVE-2025-30901 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Help Desk allows PHP Local File Inclusion. This issue affects JS Help Desk: from n/a through 2.9.2.
CVSS: HIGH (8.1) EPSS Score: 0.15%
April 1st, 2025 (21 days ago)
|
|
CVE-2025-30882 |
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk allows Path Traversal. This issue affects JS Help Desk: from n/a through 2.9.1.
CVSS: HIGH (7.5) EPSS Score: 0.06%
April 1st, 2025 (21 days ago)
|
|
CVE-2025-30880 |
Description: Missing Authorization vulnerability in JoomSky JS Help Desk allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JS Help Desk: from n/a through 2.9.2.
CVSS: HIGH (7.5) EPSS Score: 0.05%
April 1st, 2025 (21 days ago)
|
|
CVE-2025-30878 |
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JoomSky JS Help Desk allows Path Traversal. This issue affects JS Help Desk: from n/a through 2.9.2.
CVSS: HIGH (8.6) EPSS Score: 0.06%
April 1st, 2025 (21 days ago)
|
|
CVE-2025-30870 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel Engine WP Travel Engine allows PHP Local File Inclusion. This issue affects WP Travel Engine: from n/a through 6.3.5.
CVSS: HIGH (8.1) EPSS Score: 0.15%
April 1st, 2025 (21 days ago)
|
|
CVE-2025-30869 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Parakoos Image Wall allows Reflected XSS. This issue affects Image Wall: from n/a through 3.0.
CVSS: HIGH (7.1) EPSS Score: 0.04%
April 1st, 2025 (21 days ago)
|