Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-31386 |
Description: Missing Authorization vulnerability in Simplepress Simple:Press allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple:Press: from n/a through 6.10.11.
CVSS: MEDIUM (5.3) EPSS Score: 0.04%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31376 |
Description: Missing Authorization vulnerability in Mayeenul Islam NanoSupport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NanoSupport: from n/a through 0.6.0.
CVSS: MEDIUM (4.3) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-30961 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tinuzz Trackserver allows DOM-Based XSS.This issue affects Trackserver: from n/a through 5.0.3.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31410 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in Ashish Ajani WP Church Donation allows Cross Site Request Forgery.This issue affects WP Church Donation: from n/a through 1.7.
CVSS: MEDIUM (4.3) EPSS Score: 0.02%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31406 |
Description: Subscriber Broken Access Control in ELEX WooCommerce Request a Quote <= 2.3.3 versions.
CVSS: MEDIUM (4.3) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31417 |
Description: Missing Authorization vulnerability in Fahad Mahmood WP Docs allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Docs: from n/a through n/a.
CVSS: MEDIUM (4.3) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31414 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stylemix Cost Calculator Builder allows Stored XSS. This issue affects Cost Calculator Builder: from n/a through 3.2.65.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31412 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound JetProductGallery allows DOM-Based XSS. This issue affects JetProductGallery: from n/a through 2.1.22.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-31043 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound JetSearch allows DOM-Based XSS. This issue affects JetSearch: from n/a through 3.5.7.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|
|
CVE-2025-30987 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound JetBlocks For Elementor allows Stored XSS. This issue affects JetBlocks For Elementor: from n/a through 1.3.16.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 31st, 2025 (22 days ago)
|