CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-46538 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webplanetsoft Inline Text Popup allows DOM-Based XSS. This issue affects Inline Text Popup: from n/a through 1.0.0.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 24th, 2025 (2 months ago)
|
|
CVE-2025-46536 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RichardHarrison Carousel-of-post-images allows DOM-Based XSS. This issue affects Carousel-of-post-images: from n/a through 1.07.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 24th, 2025 (2 months ago)
|
|
CVE-2025-46534 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DanielRiera Image Style Hover allows DOM-Based XSS. This issue affects Image Style Hover: from n/a through 1.0.6.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 24th, 2025 (2 months ago)
|
|
CVE-2025-46533 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdrift.no Landing pages and Domain aliases for WordPress allows Stored XSS. This issue affects Landing pages and Domain aliases for WordPress: from n/a through 0.8.
CVSS: MEDIUM (5.9) EPSS Score: 0.03%
April 24th, 2025 (2 months ago)
|
|
CVE-2025-46532 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Haris Zulfiqar Tooltip allows DOM-Based XSS. This issue affects Tooltip: from n/a through 1.0.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 24th, 2025 (2 months ago)
|
|
CVE-2025-46531 |
Description: Server-Side Request Forgery (SSRF) vulnerability in Ankur Vishwakarma WP AVCL Automation Helper (formerly WPFlyLeads) allows Server Side Request Forgery. This issue affects WP AVCL Automation Helper (formerly WPFlyLeads): from n/a through 3.4.
CVSS: MEDIUM (4.9) EPSS Score: 0.03%
April 24th, 2025 (2 months ago)
|
|
CVE-2025-46529 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StressFree Sites Business Contact Widget allows Stored XSS. This issue affects Business Contact Widget: from n/a through 2.7.0.
CVSS: MEDIUM (5.9) EPSS Score: 0.03%
April 24th, 2025 (2 months ago)
|
|
CVE-2025-46525 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in msmitley WP Cookie Consent allows Stored XSS. This issue affects WP Cookie Consent: from n/a through 1.0.
CVSS: MEDIUM (5.9) EPSS Score: 0.03%
April 24th, 2025 (2 months ago)
|
|
CVE-2025-46523 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devignstudiosltd COVID-19 (Coronavirus) Update Your Customers allows Stored XSS. This issue affects COVID-19 (Coronavirus) Update Your Customers: from n/a through 1.5.1.
CVSS: MEDIUM (5.9) EPSS Score: 0.03%
April 24th, 2025 (2 months ago)
|
|
CVE-2025-46521 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Silver Muru WS Force Login Page allows Stored XSS. This issue affects WS Force Login Page: from n/a through 3.0.3.
CVSS: MEDIUM (5.9) EPSS Score: 0.03%
April 24th, 2025 (2 months ago)
|