Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-31549 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Agency Dominion Inc. Fusion allows DOM-Based XSS. This issue affects Fusion: from n/a through 1.6.3.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31546 |
Description: Missing Authorization vulnerability in WP Messiah Swiss Toolkit For WP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Swiss Toolkit For WP: from n/a through 1.3.0.
CVSS: MEDIUM (4.3) EPSS Score: 0.04%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31545 |
Description: Missing Authorization vulnerability in WP Messiah Safe Ai Malware Protection for WP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Safe Ai Malware Protection for WP: from n/a through 1.0.20.
CVSS: MEDIUM (5.4) EPSS Score: 0.04%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31544 |
Description: Missing Authorization vulnerability in WP Messiah Swiss Toolkit For WP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Swiss Toolkit For WP: from n/a through 1.3.0.
CVSS: MEDIUM (4.3) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31543 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Twice Commerce Twice Commerce allows DOM-Based XSS. This issue affects Twice Commerce: from n/a through 1.3.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31540 |
Description: Missing Authorization vulnerability in acmemediakits ACME Divi Modules allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ACME Divi Modules: from n/a through 1.3.5.
CVSS: MEDIUM (4.3) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31539 |
Description: Missing Authorization vulnerability in Blocksera Cryptocurrency Widgets Pack allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Cryptocurrency Widgets Pack: from n/a through 2.0.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31538 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in checklistcom Checklist allows Stored XSS. This issue affects Checklist: from n/a through 1.1.9.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31535 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PressTigers Simple Owl Carousel allows DOM-Based XSS. This issue affects Simple Owl Carousel: from n/a through 1.1.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31533 |
Description: Missing Authorization vulnerability in Salesmate.io Salesmate Add-On for Gravity Forms allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Salesmate Add-On for Gravity Forms: from n/a through 2.0.3.
CVSS: MEDIUM (5.3) EPSS Score: 0.05%
March 31st, 2025 (22 days ago)
|