Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited

CVE-2025-39422
WordPress WP Social Bookmarking plugin <= 3.6 - Cross Site Request Forgery (CSRF) vulnerability
Description: Cross-Site Request Forgery (CSRF) vulnerability in PResponsive WP Social Bookmarking allows Stored XSS. This issue affects WP Social Bookmarking: from n/a through 3.6.

CVSS: HIGH (7.1)

Source: CVE
April 17th, 2025 (about 6 hours ago)

CVE-2025-39421
WordPress WP Sticky Side Buttons plugin <= 2.1 - Cross Site Request Forgery (CSRF) vulnerability
Description: Cross-Site Request Forgery (CSRF) vulnerability in Mustafa KUCUK WP Sticky Side Buttons allows Stored XSS. This issue affects WP Sticky Side Buttons: from n/a through 2.1.

CVSS: HIGH (7.1)

Source: CVE
April 17th, 2025 (about 6 hours ago)

CVE-2025-39420
WordPress WP Twitter Button plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ruudkok WP Twitter Button allows Stored XSS. This issue affects WP Twitter Button: from n/a through 1.4.1.

CVSS: HIGH (7.1)

Source: CVE
April 17th, 2025 (about 6 hours ago)

CVE-2025-39419
WordPress Revision Diet plugin <= 1.0.1 - CSRF to Stored XSS vulnerability
Description: Cross-Site Request Forgery (CSRF) vulnerability in David Miller Revision Diet allows Stored XSS. This issue affects Revision Diet: from n/a through 1.0.1.

CVSS: HIGH (7.1)

Source: CVE
April 17th, 2025 (about 6 hours ago)

CVE-2025-39418
WordPress RSS Manager plugin <= 0.06 - CSRF to Stored XSS vulnerability
Description: Cross-Site Request Forgery (CSRF) vulnerability in ajayver RSS Manager allows Stored XSS. This issue affects RSS Manager: from n/a through 0.06.

CVSS: HIGH (7.1)

SSVC Exploitation: none

Source: CVE
April 17th, 2025 (about 6 hours ago)

CVE-2025-39417
WordPress Redirect wordpress to welcome or landing page plugin <= 2.0 - CSRF to Stored XSS vulnerability
Description: Cross-Site Request Forgery (CSRF) vulnerability in Eslam Mahmoud Redirect wordpress to welcome or landing page allows Stored XSS. This issue affects Redirect wordpress to welcome or landing page: from n/a through 2.0.

CVSS: HIGH (7.1)

Source: CVE
April 17th, 2025 (about 6 hours ago)

CVE-2025-39416
WordPress translit it! plugin <= 1.6 - CSRF to Stored XSS vulnerability
Description: Cross-Site Request Forgery (CSRF) vulnerability in Ichi translit it! allows Stored XSS. This issue affects translit it!: from n/a through 1.6.

CVSS: HIGH (7.1)

Source: CVE
April 17th, 2025 (about 6 hours ago)

CVE-2025-39415
WordPress Social Media Links plugin <= 1.0.3 - CSRF to Stored XSS vulnerability
Description: Cross-Site Request Forgery (CSRF) vulnerability in Jayesh Parejiya Social Media Links allows Stored XSS. This issue affects Social Media Links: from n/a through 1.0.3.

CVSS: HIGH (7.1)

Source: CVE
April 17th, 2025 (about 6 hours ago)

CVE-2025-39414
WordPress spam-stopper plugin <= 3.1.3 - CSRF to Stored XSS vulnerability
Description: Cross-Site Request Forgery (CSRF) vulnerability in Mike spam-stopper allows Stored XSS. This issue affects spam-stopper: from n/a through 3.1.3.

CVSS: HIGH (7.1)

SSVC Exploitation: none

Source: CVE
April 17th, 2025 (about 6 hours ago)

CVE-2025-32686
WordPress Team Members <= 3.4.0 - PHP Object Injection Vulnerability
Description: Deserialization of Untrusted Data vulnerability in WP Speedo Team Members allows Object Injection. This issue affects Team Members: from n/a through 3.4.0.

CVSS: HIGH (8.8)

Source: CVE
April 17th, 2025 (about 6 hours ago)