Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-39529 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robin Cornett Scriptless Social Sharing allows Stored XSS. This issue affects Scriptless Social Sharing: from n/a through 3.2.4.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 16th, 2025 (3 days ago)
|
|
CVE-2025-39528 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS. This issue affects Rescue Shortcodes: from n/a through 3.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 16th, 2025 (3 days ago)
|
|
CVE-2025-39525 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Logo Carousel Slider allows Stored XSS. This issue affects Logo Carousel Slider: from n/a through 2.1.3.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 16th, 2025 (3 days ago)
|
|
CVE-2025-39524 |
Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in bPlugins Html5 Audio Player allows Stored XSS. This issue affects Html5 Audio Player: from n/a through 2.2.28.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 16th, 2025 (3 days ago)
|
|
CVE-2025-39522 |
Description: Missing Authorization vulnerability in Sebastian Lee Dynamic Post allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Dynamic Post: from n/a through 4.10.
CVSS: MEDIUM (5.4) EPSS Score: 0.04%
April 16th, 2025 (3 days ago)
|
|
CVE-2025-39520 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham Checkout Files Upload for WooCommerce allows Stored XSS. This issue affects Checkout Files Upload for WooCommerce: from n/a through 2.2.0.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 16th, 2025 (3 days ago)
|
|
CVE-2025-39517 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Map Plugins Basic Interactive World Map allows Cross Site Request Forgery. This issue affects Basic Interactive World Map: from n/a through 2.7.
CVSS: MEDIUM (4.3) EPSS Score: 0.01%
April 16th, 2025 (3 days ago)
|
|
CVE-2025-39516 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alan Petersen Author WIP Progress Bar allows DOM-Based XSS. This issue affects Author WIP Progress Bar: from n/a through 1.0.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 16th, 2025 (3 days ago)
|
|
CVE-2025-39515 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tnomi Attendance Manager allows Stored XSS. This issue affects Attendance Manager: from n/a through 0.6.2.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 16th, 2025 (3 days ago)
|
|
CVE-2025-39514 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Asgaros Asgaros Forum allows Stored XSS. This issue affects Asgaros Forum: from n/a through 3.0.0.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 16th, 2025 (3 days ago)
|