Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-31768 |
Description: Missing Authorization vulnerability in OTWthemes Widget Manager Light allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Widget Manager Light: from n/a through 1.18.
CVSS: MEDIUM (6.5) EPSS Score: 0.05%
April 3rd, 2025 (18 days ago)
|
|
CVE-2025-31758 |
Description: Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Free Woocommerce Product Table View: from n/a through 1.78.
CVSS: MEDIUM (6.5) EPSS Score: 0.04%
April 3rd, 2025 (18 days ago)
|
|
CVE-2025-31746 |
Description: Missing Authorization vulnerability in Think201 Clients allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Clients: from n/a through 1.1.4.
CVSS: MEDIUM (6.4) EPSS Score: 0.04%
April 3rd, 2025 (18 days ago)
|
|
CVE-2025-31739 |
Description: Missing Authorization vulnerability in Manuel Schmalstieg Minimalistic Event Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Minimalistic Event Manager: from n/a through 1.1.1.
CVSS: MEDIUM (6.4) EPSS Score: 0.04%
April 3rd, 2025 (18 days ago)
|
|
CVE-2025-31736 |
Description: Missing Authorization vulnerability in richtexteditor Rich Text Editor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Rich Text Editor: from n/a through 1.0.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.05%
April 3rd, 2025 (18 days ago)
|
|
CVE-2025-31729 |
Description: Missing Authorization vulnerability in jeffikus WooTumblog allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WooTumblog: from n/a through 2.1.4.
CVSS: MEDIUM (6.5) EPSS Score: 0.05%
April 3rd, 2025 (18 days ago)
|
|
CVE-2025-31622 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Utkarsh Kukreti Advanced Typekit allows Stored XSS. This issue affects Advanced Typekit: from n/a through 1.0.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 3rd, 2025 (18 days ago)
|
|
CVE-2025-31581 |
Description: Missing Authorization vulnerability in Sandeep Kumar WP Video Playlist allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Video Playlist: from n/a through 1.1.2.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 3rd, 2025 (18 days ago)
|
|
CVE-2025-31558 |
Description: Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Greg TailPress allows Retrieve Embedded Sensitive Data. This issue affects TailPress: from n/a through 0.4.4.
CVSS: MEDIUM (5.8) EPSS Score: 0.04%
April 3rd, 2025 (18 days ago)
|
|
CVE-2025-31554 |
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in docxpresso Docxpresso allows Absolute Path Traversal. This issue affects Docxpresso: from n/a through 2.6.
CVSS: MEDIUM (5.9) EPSS Score: 0.06%
April 3rd, 2025 (18 days ago)
|