Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-30881

Description: Missing Authorization vulnerability in ThemeHunk Big Store allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Big Store: from n/a through 2.0.8.

CVSS: MEDIUM (4.3)

EPSS Score: 0.03%

Source: CVE
March 27th, 2025 (26 days ago)

CVE-2025-30874

Description: Missing Authorization vulnerability in Jose Specific Content For Mobile allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Specific Content For Mobile: from n/a through 0.5.3.

CVSS: MEDIUM (4.3)

EPSS Score: 0.03%

Source: CVE
March 27th, 2025 (26 days ago)

CVE-2025-30873

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift allows Stored XSS. This issue affects Greenshift: from n/a through 11.0.2.

CVSS: MEDIUM (6.5)

EPSS Score: 0.03%

Source: CVE
March 27th, 2025 (26 days ago)

CVE-2025-30872

Description: Cross-Site Request Forgery (CSRF) vulnerability in Nitin Prakash Product Author for WooCommerce allows Cross Site Request Forgery. This issue affects Product Author for WooCommerce: from n/a through 1.0.7.

CVSS: MEDIUM (4.3)

EPSS Score: 0.02%

Source: CVE
March 27th, 2025 (26 days ago)

CVE-2025-30867

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SearchIQ SearchIQ allows Stored XSS. This issue affects SearchIQ: from n/a through 4.7.

CVSS: MEDIUM (6.5)

EPSS Score: 0.03%

Source: CVE
March 27th, 2025 (26 days ago)

CVE-2025-30866

Description: Missing Authorization vulnerability in Giannis Kipouros Terms & Conditions Per Product allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Terms & Conditions Per Product: from n/a through 1.2.15.

CVSS: MEDIUM (5.3)

EPSS Score: 0.04%

Source: CVE
March 27th, 2025 (26 days ago)

CVE-2025-30865

Description: Cross-Site Request Forgery (CSRF) vulnerability in fuzzoid 3DPrint Lite allows Cross Site Request Forgery. This issue affects 3DPrint Lite: from n/a through 2.1.3.5.

CVSS: MEDIUM (4.3)

EPSS Score: 0.02%

Source: CVE
March 27th, 2025 (26 days ago)

CVE-2025-30864

Description: Missing Authorization vulnerability in falselight Exchange Rates allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Exchange Rates: from n/a through 1.2.2.

CVSS: MEDIUM (4.3)

EPSS Score: 0.03%

Source: CVE
March 27th, 2025 (26 days ago)

CVE-2025-30863

Description: Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms allows Cross Site Request Forgery. This issue affects Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.0.9.

CVSS: MEDIUM (4.3)

EPSS Score: 0.02%

Source: CVE
March 27th, 2025 (26 days ago)

CVE-2025-30862

Description: Cross-Site Request Forgery (CSRF) vulnerability in Bill Minozzi reCAPTCHA for all allows Cross Site Request Forgery. This issue affects reCAPTCHA for all: from n/a through 2.22.

CVSS: MEDIUM (4.3)

EPSS Score: 0.02%

Source: CVE
March 27th, 2025 (26 days ago)