Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-30898 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mahdi Yousefi [MahdiY] افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری) allows Stored XSS. This issue affects افزونه حمل و نقل ووکامرس (پست پیشتاز و سفارشی، پیک موتوری): from n/a through 4.2.3.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30897 |
Description: Missing Authorization vulnerability in Adnan Analytify allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Analytify: from n/a through 5.5.1.
CVSS: MEDIUM (4.3) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30896 |
Description: Missing Authorization vulnerability in weDevs WP ERP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP ERP: from n/a through 1.13.4.
CVSS: MEDIUM (5.4) EPSS Score: 0.04%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30894 |
Description: Missing Authorization vulnerability in Epsiloncool WP Fast Total Search allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Fast Total Search: from n/a through 1.79.262.
CVSS: MEDIUM (4.3) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30893 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeadConnector LeadConnector allows DOM-Based XSS. This issue affects LeadConnector: from n/a through 3.0.2.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30888 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in silverplugins217 Custom Fields Account Registration For Woocommerce allows Cross Site Request Forgery. This issue affects Custom Fields Account Registration For Woocommerce: from n/a through 1.1.
CVSS: MEDIUM (4.3) EPSS Score: 0.02%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30887 |
Description: Missing Authorization vulnerability in magepeopleteam WpEvently allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpEvently: from n/a through 4.2.9.
CVSS: MEDIUM (5.3) EPSS Score: 0.04%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30885 |
Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bit Apps Bit Form – Contact Form Plugin allows Phishing. This issue affects Bit Form – Contact Form Plugin: from n/a through 2.18.0.
CVSS: MEDIUM (4.7) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30884 |
Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bit Apps Bit Integrations allows Phishing. This issue affects Bit Integrations: from n/a through 2.4.10.
CVSS: MEDIUM (4.7) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|
|
CVE-2025-30883 |
Description: Missing Authorization vulnerability in richplugins Trust.Reviews allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Trust.Reviews: from n/a through 2.3.
CVSS: MEDIUM (4.3) EPSS Score: 0.03%
March 27th, 2025 (26 days ago)
|