CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-30894	WordPress WP Fast Total Search plugin <= 1.79.262 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Epsiloncool WP Fast Total Search allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Fast Total Search: from n/a through 1.79.262. CVSS: MEDIUM (4.3) EPSS Score: 0.03% Source: CVE March 27th, 2025 (3 months ago)
CVE-2025-30893	WordPress LeadConnector plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeadConnector LeadConnector allows DOM-Based XSS. This issue affects LeadConnector: from n/a through 3.0.2. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE March 27th, 2025 (3 months ago)
CVE-2025-30888	WordPress Custom Fields Account Registration For Woocommerce Plugin <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in silverplugins217 Custom Fields Account Registration For Woocommerce allows Cross Site Request Forgery. This issue affects Custom Fields Account Registration For Woocommerce: from n/a through 1.1. CVSS: MEDIUM (4.3) EPSS Score: 0.02% Source: CVE March 27th, 2025 (3 months ago)
CVE-2025-30887	WordPress WpEvently Plugin <= 4.2.9 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in magepeopleteam WpEvently allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpEvently: from n/a through 4.2.9. CVSS: MEDIUM (5.3) EPSS Score: 0.04% Source: CVE March 27th, 2025 (3 months ago)
CVE-2025-30885	WordPress Bit Form plugin <= 2.18.0 - Open Redirection vulnerability Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bit Apps Bit Form – Contact Form Plugin allows Phishing. This issue affects Bit Form – Contact Form Plugin: from n/a through 2.18.0. CVSS: MEDIUM (4.7) EPSS Score: 0.03% Source: CVE March 27th, 2025 (3 months ago)
CVE-2025-30884	WordPress Bit Integrations plugin <= 2.4.10 - Open Redirection vulnerability Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bit Apps Bit Integrations allows Phishing. This issue affects Bit Integrations: from n/a through 2.4.10. CVSS: MEDIUM (4.7) EPSS Score: 0.03% Source: CVE March 27th, 2025 (3 months ago)
CVE-2025-30883	WordPress Trust.Reviews plugin <= 2.3 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in richplugins Trust.Reviews allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Trust.Reviews: from n/a through 2.3. CVSS: MEDIUM (4.3) EPSS Score: 0.03% Source: CVE March 27th, 2025 (3 months ago)
CVE-2025-30881	WordPress Big Store theme <= 2.0.8 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in ThemeHunk Big Store allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Big Store: from n/a through 2.0.8. CVSS: MEDIUM (4.3) EPSS Score: 0.03% Source: CVE March 27th, 2025 (3 months ago)
CVE-2025-30874	WordPress Specific Content For Mobile plugin <= 0.5.3 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Jose Specific Content For Mobile allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Specific Content For Mobile: from n/a through 0.5.3. CVSS: MEDIUM (4.3) EPSS Score: 0.03% Source: CVE March 27th, 2025 (3 months ago)
CVE-2025-30873	WordPress Greenshift plugin <= 11.0.2 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift allows Stored XSS. This issue affects Greenshift: from n/a through 11.0.2. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE March 27th, 2025 (3 months ago)