Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-25130

Description: Relative Path Traversal vulnerability in NotFound Delete Comments By Status allows PHP Local File Inclusion. This issue affects Delete Comments By Status: from n/a through 2.1.1.

CVSS: HIGH (7.5)

EPSS Score: 0.05%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-25129

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Callback Request allows Reflected XSS. This issue affects Callback Request: from n/a through 1.4.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-25127

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rohitashv Singhal Contact Us By Lord Linus allows Reflected XSS. This issue affects Contact Us By Lord Linus: from n/a through 2.6.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-25124

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devu Status Updater allows Reflected XSS. This issue affects Status Updater: from n/a through 1.9.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-25122

Description: Path Traversal vulnerability in NotFound WizShop allows PHP Local File Inclusion. This issue affects WizShop: from n/a through 3.0.2.

CVSS: HIGH (8.1)

EPSS Score: 0.07%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-25121

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Theme Options Z allows Stored XSS. This issue affects Theme Options Z: from n/a through 1.4.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-25119

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Woocommerce osCommerce Sync allows Reflected XSS. This issue affects Woocommerce osCommerce Sync: from n/a through 2.0.20.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-25118

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Top Bar – PopUps – by WPOptin allows Reflected XSS. This issue affects Top Bar – PopUps – by WPOptin: from n/a through 2.0.8.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-25114

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ehabstar User Role allows Reflected XSS. This issue affects User Role: from n/a through 1.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-25113

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Implied Cookie Consent allows Reflected XSS. This issue affects Implied Cookie Consent: from n/a through 1.3.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)