CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-47618	WordPress BMI Adult & Kid Calculator plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mortgage Calculator BMI Adult & Kid Calculator allows Reflected XSS. This issue affects BMI Adult & Kid Calculator: from n/a through 1.2.2. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE May 23rd, 2025 (22 days ago)
CVE-2025-47613	WordPress School Management System for Wordpress plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE May 23rd, 2025 (22 days ago)
CVE-2025-47611	WordPress User Meta plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Khaled User Meta allows Reflected XSS. This issue affects User Meta: from n/a through 3.1.2. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE May 23rd, 2025 (22 days ago)
CVE-2025-47603	WordPress belingoGeo <= 1.12.0 - Arbitrary File Download Vulnerability Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Belingo belingoGeo allows Path Traversal. This issue affects belingoGeo: from n/a through 1.12.0. CVSS: HIGH (7.5) EPSS Score: 0.06% Source: CVE May 23rd, 2025 (22 days ago)
CVE-2025-47575	WordPress School Management plugin <= 92.0.0 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla School Management allows SQL Injection. This issue affects School Management: from n/a through 92.0.0. CVSS: HIGH (8.5) EPSS Score: 0.03% Source: CVE May 23rd, 2025 (22 days ago)
CVE-2025-47558	WordPress MapSVG plugin <= 8.5.31 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in RomanCode MapSVG allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects MapSVG: from n/a through 8.5.31. CVSS: HIGH (7.5) EPSS Score: 0.04% Source: CVE May 23rd, 2025 (22 days ago)
CVE-2025-47541	WordPress Mail Mint <= 1.17.7 - Sensitive Data Exposure Vulnerability Description: Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Mail Mint: from n/a through 1.17.7. CVSS: HIGH (7.5) EPSS Score: 0.04% Source: CVE May 23rd, 2025 (22 days ago)
CVE-2025-47535	WordPress Opal Woo Custom Product Variation <= 1.2.0 - Arbitrary File Deletion Vulnerability Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpopal Opal Woo Custom Product Variation allows Path Traversal. This issue affects Opal Woo Custom Product Variation: from n/a through 1.2.0. CVSS: HIGH (8.6) EPSS Score: 0.06% Source: CVE May 23rd, 2025 (22 days ago)
CVE-2025-47512	WordPress Tainacan plugin <= 0.21.14 - Arbitrary File Deletion vulnerability Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in tainacan Tainacan allows Path Traversal. This issue affects Tainacan: from n/a through 0.21.14. CVSS: HIGH (8.6) EPSS Score: 0.06% Source: CVE May 23rd, 2025 (22 days ago)
CVE-2025-47492	WordPress Drag and Drop File Upload for Elementor Forms <= 1.4.3 - Arbitrary File Deletion Vulnerability Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms allows Path Traversal. This issue affects Drag and Drop File Upload for Elementor Forms: from n/a through 1.4.3. CVSS: HIGH (8.6) EPSS Score: 0.11% Source: CVE May 23rd, 2025 (22 days ago)