Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-31618 |
Description: Missing Authorization vulnerability in Jaap Jansma Connector to CiviCRM with CiviMcRestFace allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Connector to CiviCRM with CiviMcRestFace: from n/a through 1.0.9.
CVSS: MEDIUM (5.3) EPSS Score: 0.04%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31614 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hiroprot Terms Before Download allows Stored XSS. This issue affects Terms Before Download: from n/a through 1.0.4.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31611 |
Description: Missing Authorization vulnerability in Shaharia Azam Auto Post After Image Upload allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Auto Post After Image Upload: from n/a through 1.6.
CVSS: MEDIUM (4.3) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31610 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gingerplugins Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme allows Stored XSS. This issue affects Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme: from n/a through 1.1.
CVSS: MEDIUM (5.9) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31609 |
Description: Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WPCargo Track & Trace: from n/a through 7.0.6.
CVSS: MEDIUM (4.3) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31608 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reDim GmbH CookieHint WP allows Stored XSS. This issue affects CookieHint WP: from n/a through 1.0.0.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31607 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flomei Simple-Audioplayer allows Stored XSS. This issue affects Simple-Audioplayer: from n/a through 1.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31606 |
Description: Missing Authorization vulnerability in softpulseinfotech SP Blog Designer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SP Blog Designer: from n/a through 1.0.0.
CVSS: MEDIUM (4.8) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31605 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WeblineIndia Welcome Popup allows Stored XSS. This issue affects Welcome Popup: from n/a through 1.0.10.
CVSS: MEDIUM (5.9) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31604 |
Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cal.com Cal.com allows Stored XSS. This issue affects Cal.com: from n/a through 1.0.0.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|