CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-39400 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpeverest User Registration allows Reflected XSS. This issue affects User Registration: from n/a through n/a.
CVSS: HIGH (7.1) EPSS Score: 0.04%
April 24th, 2025 (about 2 months ago)
|
|
CVE-2025-39399 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ashraful Sarkar Naiem License For Envato allows PHP Local File Inclusion. This issue affects License For Envato: from n/a through 1.0.0.
CVSS: HIGH (7.5) EPSS Score: 0.11%
April 24th, 2025 (about 2 months ago)
|
|
CVE-2025-39397 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in [email protected] Anything Popup allows Reflected XSS. This issue affects Anything Popup: from n/a through 7.3.
CVSS: HIGH (7.1) EPSS Score: 0.04%
April 24th, 2025 (about 2 months ago)
|
|
CVE-2025-39391 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zamartz Checkout Field Visibility for WooCommerce allows PHP Local File Inclusion. This issue affects Checkout Field Visibility for WooCommerce: from n/a through 1.2.3.
CVSS: HIGH (7.5) EPSS Score: 0.11%
April 24th, 2025 (about 2 months ago)
|
|
CVE-2025-39390 |
Description: Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Booking and Rental Manager: from n/a through 2.3.8.
CVSS: MEDIUM (5.3) EPSS Score: 0.04%
April 24th, 2025 (about 2 months ago)
|
|
CVE-2025-39387 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPoperation Opstore allows PHP Local File Inclusion. This issue affects Opstore: from n/a through 1.4.5.
CVSS: HIGH (7.5) EPSS Score: 0.11%
April 24th, 2025 (about 2 months ago)
|
|
CVE-2025-39385 |
Description: Missing Authorization vulnerability in VW Themes Sirat allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sirat: from n/a through 1.5.1.
CVSS: MEDIUM (4.3) EPSS Score: 0.03%
April 24th, 2025 (about 2 months ago)
|
|
CVE-2025-39384 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cedcommerce Product Lister for eBay allows PHP Local File Inclusion. This issue affects Product Lister for eBay: from n/a through 2.0.9.
CVSS: HIGH (7.5) EPSS Score: 0.11%
April 24th, 2025 (about 2 months ago)
|
|
CVE-2025-39383 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Code Work Web Xews Lite allows PHP Local File Inclusion. This issue affects Xews Lite: from n/a through 1.0.9.
CVSS: HIGH (7.5) EPSS Score: 0.11%
April 24th, 2025 (about 2 months ago)
|
|
CVE-2025-39382 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in danielpataki ACF: Google Font Selector allows Reflected XSS. This issue affects ACF: Google Font Selector: from n/a through 3.0.1.
CVSS: HIGH (7.1) EPSS Score: 0.04%
April 24th, 2025 (about 2 months ago)
|