Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE-2025-30804

Description: Cross-Site Request Forgery (CSRF) vulnerability in maennchen1.de wpShopGermany IT-RECHT KANZLEI allows Cross Site Request Forgery. This issue affects wpShopGermany IT-RECHT KANZLEI: from n/a through 2.0.

CVSS: MEDIUM (4.3)

EPSS Score: 0.02%

Source: CVE
March 27th, 2025 (27 days ago)

CVE-2025-30803

Description: Missing Authorization vulnerability in Greg Ross Just Writing Statistics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Just Writing Statistics: from n/a through 5.3.

CVSS: MEDIUM (4.3)

EPSS Score: 0.03%

Source: CVE
March 27th, 2025 (27 days ago)

CVE-2025-30801

Description: Cross-Site Request Forgery (CSRF) vulnerability in Abu Bakar TWB Woocommerce Reviews allows Cross Site Request Forgery. This issue affects TWB Woocommerce Reviews: from n/a through 1.7.7.

CVSS: MEDIUM (4.3)

EPSS Score: 0.02%

Source: CVE
March 27th, 2025 (27 days ago)

CVE-2025-30800

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Atawai Gum Elementor Addon allows Stored XSS. This issue affects Gum Elementor Addon: from n/a through 1.3.10.

CVSS: MEDIUM (6.5)

EPSS Score: 0.03%

Source: CVE
March 27th, 2025 (27 days ago)

CVE-2025-30799

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pagup WP Google Street View allows Stored XSS. This issue affects WP Google Street View: from n/a through 1.1.5.

CVSS: MEDIUM (5.9)

EPSS Score: 0.03%

Source: CVE
March 27th, 2025 (27 days ago)

CVE-2025-30795

Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FunnelKit Automation By Autonami allows Phishing. This issue affects Automation By Autonami: from n/a through 3.5.1.

CVSS: MEDIUM (4.7)

EPSS Score: 0.03%

Source: CVE
March 27th, 2025 (27 days ago)

CVE-2025-30792

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zumbo Comment Approved Notifier Extended allows Stored XSS. This issue affects Comment Approved Notifier Extended: from n/a through 5.2.

CVSS: MEDIUM (5.9)

EPSS Score: 0.03%

Source: CVE
March 27th, 2025 (27 days ago)

CVE-2025-30790

Description: Missing Authorization vulnerability in alexvtn Chatbox Manager allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Chatbox Manager: from n/a through 1.2.2.

CVSS: MEDIUM (5.3)

EPSS Score: 0.04%

Source: CVE
March 27th, 2025 (27 days ago)

CVE-2025-30789

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in clearoutio Clearout Email Validator allows Stored XSS. This issue affects Clearout Email Validator: from n/a through 3.2.0.

CVSS: MEDIUM (5.9)

EPSS Score: 0.03%

Source: CVE
March 27th, 2025 (27 days ago)

CVE-2025-30786

Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in oooorgle Quotes llama allows DOM-Based XSS. This issue affects Quotes llama: from n/a through 3.1.0.

CVSS: MEDIUM (6.5)

EPSS Score: 0.03%

Source: CVE
March 27th, 2025 (27 days ago)