Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2024-13452 |
Description: The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.29. This is due to missing or incorrect nonce validation on a saveAsCopy function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS: MEDIUM (6.1) EPSS Score: 0.03%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-30982 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zookatron MyBookProgress by Stormhill Media allows Stored XSS. This issue affects MyBookProgress by Stormhill Media: from n/a through 1.0.8.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-30966 |
Description: Path Traversal vulnerability in NotFound WPJobBoard allows Path Traversal. This issue affects WPJobBoard: from n/a through n/a.
CVSS: MEDIUM (5.4) EPSS Score: 0.03%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-26998 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks – Gutenberg based Page Builder allows Stored XSS. This issue affects SKT Blocks – Gutenberg based Page Builder: from n/a through 1.8.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-26996 |
Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Fetch Designs Sign-up Sheets allows Code Injection. This issue affects Sign-up Sheets: from n/a through 2.3.0.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.04%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-26951 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in covertnine C9 Blocks allows DOM-Based XSS. This issue affects C9 Blocks: from n/a through 1.7.7.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-26950 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AddonsPress Nepali Date Converter allows Stored XSS. This issue affects Nepali Date Converter: from n/a through 2.0.8.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-26934 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in graphthemes Glossy Blog allows Stored XSS. This issue affects Glossy Blog: from n/a through 1.0.3.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-26930 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in alleythemes Home Services allows DOM-Based XSS. This issue affects Home Services: from n/a through 1.2.6.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-26919 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainá allows Stored XSS. This issue affects Tainá: from n/a through 0.2.2.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 15th, 2025 (4 days ago)
|