CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-48247	WordPress Shortlinks by Pretty Links <= 3.6.15 - Broken Access Control Vulnerability Description: Missing Authorization vulnerability in Blair Williams Shortlinks by Pretty Links allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Shortlinks by Pretty Links: from n/a through 3.6.15. CVSS: MEDIUM (4.3) EPSS Score: 0.03% Source: CVE May 19th, 2025 (about 1 month ago)
CVE-2025-48246	WordPress The Events Calendar <= 6.11.2.1 - Broken Access Control Vulnerability Description: Missing Authorization vulnerability in The Events Calendar The Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Events Calendar: from n/a through 6.11.2.1. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE May 19th, 2025 (about 1 month ago)
CVE-2025-48244	WordPress Exclusive Addons Elementor <= 2.7.9 - Cross Site Scripting (XSS) Vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim Strifler Exclusive Addons Elementor allows Stored XSS. This issue affects Exclusive Addons Elementor: from n/a through 2.7.9. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE May 19th, 2025 (about 1 month ago)
CVE-2025-48243	WordPress reCAPTCHA for all <= 2.26 - Cross Site Request Forgery (CSRF) Vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in Bill Minozzi reCAPTCHA for all allows Cross Site Request Forgery. This issue affects reCAPTCHA for all: from n/a through 2.26. CVSS: MEDIUM (4.3) EPSS Score: 0.02% Source: CVE May 19th, 2025 (about 1 month ago)
CVE-2025-48242	WordPress Legal Pages <= 1.4.5 - Broken Access Control Vulnerability Description: Missing Authorization vulnerability in wpWax Legal Pages allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Legal Pages: from n/a through 1.4.5. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE May 19th, 2025 (about 1 month ago)
CVE-2025-48240	WordPress Cost of Goods for WooCommerce <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Cost of Goods for WooCommerce allows Stored XSS. This issue affects Cost of Goods for WooCommerce: from n/a through 3.7.0. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE May 19th, 2025 (about 1 month ago)
CVE-2025-48239	WordPress Product Notes Tab & Private Admin Notes for WooCommerce <= 3.1.0 - Cross Site Scripting (XSS) Vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Product Notes Tab & Private Admin Notes for WooCommerce allows Stored XSS. This issue affects Product Notes Tab & Private Admin Notes for WooCommerce: from n/a through 3.1.0. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE May 19th, 2025 (about 1 month ago)
CVE-2025-48237	WordPress Wishlist for WooCommerce <= 3.2.2 - Cross Site Scripting (XSS) Vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Wishlist for WooCommerce allows Stored XSS. This issue affects Wishlist for WooCommerce: from n/a through 3.2.2. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE May 19th, 2025 (about 1 month ago)
CVE-2025-48235	WordPress WP Image Mask <= 3.1.2 - Cross Site Scripting (XSS) Vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bogdan Bendziukov WP Image Mask allows DOM-Based XSS. This issue affects WP Image Mask: from n/a through 3.1.2. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE May 19th, 2025 (about 1 month ago)
CVE-2025-48234	WordPress Ultimate Blocks <= 3.3.0 - Cross Site Scripting (XSS) Vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ultimate Blocks Ultimate Blocks allows DOM-Based XSS. This issue affects Ultimate Blocks: from n/a through 3.3.0. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE May 19th, 2025 (about 1 month ago)