CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-32134	WordPress URL Shortify Plugin <= 1.10.4 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders URL Shortify allows Stored XSS. This issue affects URL Shortify: from n/a through 1.10.4. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 4th, 2025 (2 months ago)
CVE-2025-32133	WordPress Secure Copy Content Protection and Content Locking plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Secure Copy Content Protection and Content Locking allows Stored XSS. This issue affects Secure Copy Content Protection and Content Locking: from n/a through 4.5.1. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 4th, 2025 (2 months ago)
CVE-2025-32132	WordPress FunnelCockpit Plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelCockpit FunnelCockpit allows Stored XSS. This issue affects FunnelCockpit: from n/a through 1.4.2. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 4th, 2025 (2 months ago)
CVE-2025-32131	WordPress Social Intents plugin <= 1.6.14 - Cross Site Scripting (XSS) Vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in socialintents Social Intents allows Stored XSS. This issue affects Social Intents: from n/a through 1.6.14. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 4th, 2025 (2 months ago)
CVE-2025-32130	WordPress Posts Footer Manager plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Risk Migitation, Inc. Posts Footer Manager allows Stored XSS. This issue affects Posts Footer Manager: from n/a through 2.2.0. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 4th, 2025 (2 months ago)
CVE-2025-32129	WordPress Welcome Bar plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Risk Migitation, Inc. Welcome Bar allows Stored XSS. This issue affects Welcome Bar: from n/a through 2.0.4. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 4th, 2025 (2 months ago)
CVE-2025-31407	WordPress Tiger theme <= 2.0 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hutsixdigital Tiger allows Stored XSS.This issue affects Tiger: from n/a through 2.0. CVSS: MEDIUM (6.5) EPSS Score: 0.03% SSVC Exploitation: none Source: CVE April 4th, 2025 (2 months ago)
CVE-2025-31381	WordPress Booking Calendar and Notification plugin <= 4.0.3 - Broken Authentication vulnerability Description: Missing Authorization vulnerability in shiptrack Booking Calendar and Notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Calendar and Notification: from n/a through 4.0.3. CVSS: MEDIUM (6.5) EPSS Score: 0.05% Source: CVE April 4th, 2025 (2 months ago)
CVE-2025-22285	WordPress Pallet Packaging for WooCommerce Plugin <= 1.1.15 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Eniture Technology Pallet Packaging for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pallet Packaging for WooCommerce: from n/a through 1.1.15. CVSS: MEDIUM (6.5) EPSS Score: 0.05% Source: CVE April 4th, 2025 (2 months ago)
CVE-2025-22281	WordPress Simplish theme <= 2.6.4 - Stored Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in joshix Simplish allows Stored XSS.This issue affects Simplish: from n/a through 2.6.4. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE April 4th, 2025 (2 months ago)