Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-27565 |
Description: An unauthenticated attacker can delete any user's "rooms" by knowing the user's and room IDs.
CVSS: MEDIUM (6.9) EPSS Score: 0.05%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-27561 |
Description: Unauthenticated attackers can rename "rooms" of arbitrary users.
CVSS: MEDIUM (6.9) EPSS Score: 0.04%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-26998 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks – Gutenberg based Page Builder allows Stored XSS. This issue affects SKT Blocks – Gutenberg based Page Builder: from n/a through 1.8.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-26996 |
Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Fetch Designs Sign-up Sheets allows Code Injection. This issue affects Sign-up Sheets: from n/a through 2.3.0.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.04%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-26951 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in covertnine C9 Blocks allows DOM-Based XSS. This issue affects C9 Blocks: from n/a through 1.7.7.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-26950 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AddonsPress Nepali Date Converter allows Stored XSS. This issue affects Nepali Date Converter: from n/a through 2.0.8.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-26934 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in graphthemes Glossy Blog allows Stored XSS. This issue affects Glossy Blog: from n/a through 1.0.3.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-26930 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in alleythemes Home Services allows DOM-Based XSS. This issue affects Home Services: from n/a through 1.2.6.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-26919 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tainacan Tainá allows Stored XSS. This issue affects Tainá: from n/a through 0.2.2.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 15th, 2025 (4 days ago)
|
|
CVE-2025-26906 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ren Ventura WP Delete User Accounts allows DOM-Based XSS. This issue affects WP Delete User Accounts: from n/a through 1.2.3.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 15th, 2025 (4 days ago)
|