CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-27328	WordPress WP-PostRatings Cheater Plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in queeez WP-PostRatings Cheater allows Cross Site Request Forgery. This issue affects WP-PostRatings Cheater: from n/a through 1.5. CVSS: MEDIUM (4.3) EPSS Score: 0.02% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27327	WordPress Live Streaming Video Player – by SRS Player plugin <= 1.0.18 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Winlin Live Streaming Video Player – by SRS Player allows DOM-Based XSS. This issue affects Live Streaming Video Player – by SRS Player: from n/a through 1.0.18. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27325	WordPress Video.js HLS Player plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bruce Video.js HLS Player allows DOM-Based XSS. This issue affects Video.js HLS Player: from n/a through 1.0.2. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27323	WordPress WP About Author plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jon Bishop WP About Author allows DOM-Based XSS. This issue affects WP About Author: from n/a through 1.5. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27320	WordPress Profile Widget Ninja plugin <= 4.3 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pankaj Mondal Profile Widget Ninja allows DOM-Based XSS. This issue affects Profile Widget Ninja: from n/a through 4.3. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27318	WordPress Simple Google Sitemap Plugin <= 1.6 - Cross Site Request Forgery (CSRF) vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in ixiter Simple Google Sitemap allows Cross Site Request Forgery. This issue affects Simple Google Sitemap: from n/a through 1.6. CVSS: MEDIUM (4.3) EPSS Score: 0.02% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27317	WordPress RAYS Grid Plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in IT-RAYS RAYS Grid allows Cross Site Request Forgery. This issue affects RAYS Grid: from n/a through 1.3.1. CVSS: MEDIUM (4.3) EPSS Score: 0.02% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27316	WordPress JPG, PNG Compression and Optimization Plugin <= 1.7.35 - Cross Site Request Forgery (CSRF) vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in hosting.io JPG, PNG Compression and Optimization allows Cross Site Request Forgery. This issue affects JPG, PNG Compression and Optimization: from n/a through 1.7.35. CVSS: MEDIUM (4.3) EPSS Score: 0.02% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27315	WordPress All-In-One Cufon Plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in wptom All-In-One Cufon allows Cross Site Request Forgery. This issue affects All-In-One Cufon: from n/a through 1.3.0. CVSS: MEDIUM (4.3) EPSS Score: 0.02% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27311	WordPress Bulk Content Creator Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in luk3thomas Bulk Content Creator allows Cross Site Request Forgery. This issue affects Bulk Content Creator: from n/a through 1.2.1. CVSS: MEDIUM (4.3) EPSS Score: 0.02% Source: CVE February 24th, 2025 (4 months ago)