CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-32242	WordPress Hive Support plugin <= 1.2.2 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Hive Support Hive Support allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Hive Support: from n/a through 1.2.2. CVSS: MEDIUM (6.5) EPSS Score: 0.05% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32240	WordPress Site Notify <= 1.0 - Broken Access Control Vulnerability Description: Missing Authorization vulnerability in NotFound Site Notify allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Site Notify: from n/a through 1.0. CVSS: MEDIUM (6.5) EPSS Score: 0.05% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32236	WordPress Woocommerce Products Reorder Drag Drop Multiple Sort plugin <= 1.9 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Vagonic Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Vagonic. This issue affects Woocommerce Products Reorder Drag Drop Multiple Sort – Sortable, Rearrange Products Vagonic: from n/a through 1.9. CVSS: MEDIUM (4.3) EPSS Score: 0.03% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32230	WordPress Tutor LMS plugin <= 3.4.0 - HTML Injection vulnerability Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Tutor LMS. This issue affects Tutor LMS: from n/a through 3.4.0. CVSS: MEDIUM (4.3) EPSS Score: 0.03% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32228	WordPress Ai Image Alt Text Generator for WP plugin <= 1.0.8 - Sensitive Data Exposure vulnerability Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Messiah Ai Image Alt Text Generator for WP. This issue affects Ai Image Alt Text Generator for WP: from n/a through 1.0.8. CVSS: MEDIUM (4.3) EPSS Score: 0.03% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32227	WordPress Asgaros Forum plugin <= 3.0.0 - File Upload Numbers Bypass vulnerability Description: Authentication Bypass by Spoofing vulnerability in Asgaros Asgaros Forum allows Identity Spoofing. This issue affects Asgaros Forum: from n/a through 3.0.0. CVSS: MEDIUM (4.3) EPSS Score: 0.04% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32221	WordPress EazyDocs plugin <= 2.6.4 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Spider Themes EazyDocs allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EazyDocs: from n/a through 2.6.4. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32216	WordPress Spider Elements – Addons for Elementor plugin <= 1.6.2 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Spider Themes Spider Elements – Addons for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Spider Elements – Addons for Elementor: from n/a through 1.6.2. CVSS: MEDIUM (6.4) EPSS Score: 0.04% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32215	WordPress Accessibility Suite plugin <= 4.18 - Arbitrary File Upload vulnerability Description: Unrestricted Upload of File with Dangerous Type vulnerability in Ability, Inc Accessibility Suite by Online ADA allows Stored XSS. This issue affects Accessibility Suite by Online ADA: from n/a through 4.18. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32214	WordPress Hive Support plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hive Support Hive Support allows Stored XSS. This issue affects Hive Support: from n/a through 1.2.2. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE April 10th, 2025 (2 months ago)