Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-46471

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gnanavelshenll WP Custom Post Popup allows DOM-Based XSS. This issue affects WP Custom Post Popup: from n/a through 1.0.1.

CVSS: MEDIUM (6.5)

EPSS Score: 0.03%

Source: CVE
April 24th, 2025 (about 2 months ago)

CVE-2025-46470

Description: Missing Authorization vulnerability in Peter Raschendorfer Smart Hashtags [#hashtagger] allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Smart Hashtags [#hashtagger]: from n/a through 7.2.3.

CVSS: MEDIUM (4.3)

EPSS Score: 0.03%

Source: CVE
April 24th, 2025 (about 2 months ago)

CVE-2025-46469

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Benjamin Buddle Send From allows Stored XSS. This issue affects Send From: from n/a through 2.2.

CVSS: MEDIUM (5.9)

EPSS Score: 0.03%

Source: CVE
April 24th, 2025 (about 2 months ago)

CVE-2025-46467

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rahendra Putra K™ RAphicon allows DOM-Based XSS. This issue affects RAphicon: from n/a through 2.1.2.

CVSS: MEDIUM (6.5)

EPSS Score: 0.03%

Source: CVE
April 24th, 2025 (about 2 months ago)

CVE-2025-46462

Description: Cross-Site Request Forgery (CSRF) vulnerability in Trân Minh-Quân WPVN allows Cross Site Request Forgery. This issue affects WPVN: from n/a through 0.7.8.

CVSS: MEDIUM (4.3)

EPSS Score: 0.02%

Source: CVE
April 24th, 2025 (about 2 months ago)

CVE-2025-46461

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Relentless Apps RRSSB allows DOM-Based XSS. This issue affects RRSSB: from n/a through 1.0.1.

CVSS: MEDIUM (6.5)

EPSS Score: 0.03%

Source: CVE
April 24th, 2025 (about 2 months ago)

CVE-2025-46459

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ralf Hortt Confirm User Registration allows Stored XSS. This issue affects Confirm User Registration: from n/a through 2.1.5.

CVSS: MEDIUM (5.9)

EPSS Score: 0.03%

Source: CVE
April 24th, 2025 (about 2 months ago)

CVE-2025-46453

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreatorTeam Zoho Creator Forms allows Stored XSS. This issue affects Zoho Creator Forms: from n/a through 1.0.5.

CVSS: MEDIUM (6.5)

EPSS Score: 0.03%

Source: CVE
April 24th, 2025 (about 2 months ago)

CVE-2025-46451

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Balkhi Floating Social Bar allows Stored XSS. This issue affects Floating Social Bar: from n/a through 1.1.7.

CVSS: MEDIUM (5.9)

EPSS Score: 0.03%

Source: CVE
April 24th, 2025 (about 2 months ago)

CVE-2025-46447

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFable Fable Extra allows DOM-Based XSS. This issue affects Fable Extra: from n/a through 1.0.6.

CVSS: MEDIUM (6.5)

EPSS Score: 0.03%

Source: CVE
April 24th, 2025 (about 2 months ago)