Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-30995 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Widgetize Pages Light allows Stored XSS. This issue affects Widgetize Pages Light: from n/a through 3.0.
CVSS: HIGH (7.1)
June 6th, 2025 (1 day ago)
|
|
CVE-2025-30994 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in Emraan Cheema CubeWP – All-in-One Dynamic Content Framework allows Cross Site Request Forgery. This issue affects CubeWP – All-in-One Dynamic Content Framework: from n/a through 1.1.23.
CVSS: MEDIUM (4.3)
June 6th, 2025 (1 day ago)
|
|
CVE-2025-30991 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shahjada Premium Packages allows Stored XSS. This issue affects Premium Packages: from n/a through 6.0.2.
CVSS: MEDIUM (6.5)
June 6th, 2025 (1 day ago)
|
|
CVE-2025-30990 |
Description: Missing Authorization vulnerability in ThemeHunk ThemeHunk allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ThemeHunk: from n/a through 1.1.1.
CVSS: MEDIUM (4.3)
June 6th, 2025 (1 day ago)
|
|
CVE-2025-30989 |
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Renzo Tejada Libro de Reclamaciones y Quejas allows SQL Injection. This issue affects Libro de Reclamaciones y Quejas: from n/a through 0.9.
CVSS: HIGH (7.6)
June 6th, 2025 (1 day ago)
|
|
CVE-2025-30986 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in _CreativeMedia_ Elite Video Player allows Cross Site Request Forgery. This issue affects Elite Video Player: from n/a through 10.0.5.
CVSS: MEDIUM (5.4)
June 6th, 2025 (1 day ago)
|
|
CVE-2025-30981 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in tggfref WP-Recall allows Privilege Escalation. This issue affects WP-Recall: from n/a through 16.26.14.
CVSS: MEDIUM (6.3)
June 6th, 2025 (1 day ago)
|
|
CVE-2025-30980 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in Alessandro Piconi Simple Keyword to Link allows Cross Site Request Forgery. This issue affects Simple Keyword to Link: from n/a through 1.5.
CVSS: MEDIUM (4.3)
June 6th, 2025 (1 day ago)
|
|
CVE-2025-30978 |
Description: Missing Authorization vulnerability in Dor Zuberi Slack Notifications by dorzki allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Slack Notifications by dorzki: from n/a through 2.0.7.
CVSS: MEDIUM (4.3)
June 6th, 2025 (1 day ago)
|
|
CVE-2025-30977 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chaport Live Chat WP Live Chat + Chatbots Plugin for WordPress – Chaport allows Stored XSS. This issue affects WP Live Chat + Chatbots Plugin for WordPress – Chaport: from n/a through 1.1.5.
CVSS: MEDIUM (5.9)
June 6th, 2025 (1 day ago)
|