Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-22652 |
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kendysond Payment Forms for Paystack allows SQL Injection.This issue affects Payment Forms for Paystack: from n/a through 4.0.1.
CVSS: HIGH (7.6) EPSS Score: 0.08%
March 27th, 2025 (25 days ago)
|
|
CVE-2025-22628 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Foliovision Filled In allows Stored XSS.This issue affects Filled In: from n/a through 1.9.2.
CVSS: HIGH (7.1) EPSS Score: 0.04%
March 27th, 2025 (25 days ago)
|
|
CVE-2024-37472 |
Description: Cross Site Scripting (XSS) vulnerability in WofficeIO Woffice allows Reflected XSS.This issue affects Woffice: from n/a through 5.4.8.
CVSS: HIGH (7.1) EPSS Score: 0.08% SSVC Exploitation: none
March 27th, 2025 (25 days ago)
|
|
CVE-2025-25100 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in victoracano Cazamba allows Reflected XSS.This issue affects Cazamba: from n/a through 1.2.
CVSS: HIGH (7.1) EPSS Score: 0.02%
March 27th, 2025 (25 days ago)
|
|
CVE-2025-25086 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in WPDeveloper Secret Meta allows Reflected XSS.This issue affects Secret Meta: from n/a through 1.2.1.
CVSS: HIGH (7.1) EPSS Score: 0.02%
March 27th, 2025 (25 days ago)
|
|
CVE-2025-30921 |
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters allows SQL Injection. This issue affects Newsletters: from n/a through 4.9.9.7.
CVSS: HIGH (7.6) EPSS Score: 0.04%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30919 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in Store Locator Widgets Store Locator Widget allows Stored XSS. This issue affects Store Locator Widget: from n/a through 20200131.
CVSS: HIGH (7.1) EPSS Score: 0.02%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30895 |
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in magepeopleteam WpEvently allows PHP Local File Inclusion. This issue affects WpEvently: from n/a through 4.2.9.
CVSS: HIGH (7.5) EPSS Score: 0.05%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30891 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam WpTravelly allows PHP Local File Inclusion. This issue affects WpTravelly: from n/a through 1.8.7.
CVSS: HIGH (8.8) EPSS Score: 0.13%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30890 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SuitePlugins Login Widget for Ultimate Member allows PHP Local File Inclusion. This issue affects Login Widget for Ultimate Member: from n/a through 1.1.2.
CVSS: HIGH (7.5) EPSS Score: 0.13%
March 27th, 2025 (26 days ago)
|