Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-25070

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Album Reviewer allows Stored XSS. This issue affects Album Reviewer: from n/a through 2.0.2.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-24758

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM Map Locations allows Reflected XSS. This issue affects CM Map Locations: from n/a through 2.0.8.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-24694

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM Email Registration Blacklist and Whitelist allows Reflected XSS. This issue affects CM Email Registration Blacklist and Whitelist: from n/a through 1.5.5.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-23956

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Easy Post Mailer allows Reflected XSS. This issue affects WP Easy Post Mailer: from n/a through 0.64.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-23945

Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound Popliup allows PHP Local File Inclusion. This issue affects Popliup: from n/a through 1.1.1.

CVSS: HIGH (7.5)

EPSS Score: 0.12%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-23904

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Rebrand Fluent Forms allows Reflected XSS. This issue affects Rebrand Fluent Forms: from n/a through 1.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-23903

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Local Shipping Labels for WooCommerce allows Reflected XSS. This issue affects Local Shipping Labels for WooCommerce: from n/a through 1.0.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-23883

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Stray Random Quotes allows Reflected XSS. This issue affects Stray Random Quotes: from n/a through 1.9.9.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-23881

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound LJ Custom Menu Links allows Reflected XSS. This issue affects LJ Custom Menu Links: from n/a through 2.5.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)

CVE-2025-23879

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PillarDev Easy Automatic Newsletter Lite allows Reflected XSS. This issue affects Easy Automatic Newsletter Lite: from n/a through 3.2.0.

CVSS: HIGH (7.1)

EPSS Score: 0.04%

Source: CVE
March 3rd, 2025 (about 2 months ago)