CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-39433	WordPress Bknewsticker plugin <= 1.0.5 - Cross Site Request Forgery (CSRF) vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in beke_ro Bknewsticker allows Stored XSS. This issue affects Bknewsticker: from n/a through 1.0.5. CVSS: HIGH (7.1) EPSS Score: 0.02% Source: CVE April 17th, 2025 (2 months ago)
CVE-2025-39432	WordPress bbPress2 shortcode whitelist plugin <= 2.2.1 - CSRF to XSS vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in antonchanning bbPress2 shortcode whitelist allows Stored XSS. This issue affects bbPress2 shortcode whitelist: from n/a through 2.2.1. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE April 17th, 2025 (2 months ago)
CVE-2025-39431	WordPress Amazon Showcase WordPress Plugin plugin <= 2.2 - CSRF to XSS vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in Aaron Forgue Amazon Showcase WordPress Plugin allows Stored XSS. This issue affects Amazon Showcase WordPress Plugin: from n/a through 2.2. CVSS: HIGH (7.1) EPSS Score: 0.02% Source: CVE April 17th, 2025 (2 months ago)
CVE-2025-39430	WordPress mLanguage plugin <= 1.6.1 - Cross Site Request Forgery (CSRF) vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in Alexander Rauscha mLanguage allows Stored XSS. This issue affects mLanguage: from n/a through 1.6.1. CVSS: HIGH (7.1) EPSS Score: 0.02% SSVC Exploitation: none Source: CVE April 17th, 2025 (2 months ago)
CVE-2025-39429	WordPress Széchenyi 2020 Logo <= 1.1 - Local File Inclusion Vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Földesi, Mihály Széchenyi 2020 Logo allows PHP Local File Inclusion. This issue affects Széchenyi 2020 Logo: from n/a through 1.1. CVSS: HIGH (7.5) EPSS Score: 0.11% SSVC Exploitation: none Source: CVE April 17th, 2025 (2 months ago)
CVE-2025-39428	WordPress Gravity Forms CSS Themes with Fontawesome and Placeholders plugin <= 8.5 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maros Pristas Gravity Forms CSS Themes with Fontawesome and Placeholders allows Stored XSS. This issue affects Gravity Forms CSS Themes with Fontawesome and Placeholders: from n/a through 8.5. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 17th, 2025 (2 months ago)
CVE-2025-39427	WordPress WP Post to PDF Enhanced plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beth Tucker Long WP Post to PDF Enhanced allows Stored XSS. This issue affects WP Post to PDF Enhanced: from n/a through 1.1.1. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 17th, 2025 (2 months ago)
CVE-2025-39426	WordPress illow – Cookies Consent plugin <= 0.2.0 - Cross Site Request Forgery (CSRF) vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in illow illow – Cookies Consent allows Cross Site Request Forgery. This issue affects illow – Cookies Consent: from n/a through 0.2.0. CVSS: MEDIUM (4.3) EPSS Score: 0.02% Source: CVE April 17th, 2025 (2 months ago)
CVE-2025-39425	WordPress Style Manager plugin <= 2.2.7 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in pixelgrade Style Manager allows Cross Site Request Forgery. This issue affects Style Manager: from n/a through 2.2.7. CVSS: MEDIUM (4.3) EPSS Score: 0.02% Source: CVE April 17th, 2025 (2 months ago)
CVE-2025-39424	WordPress Simple Maps plugin <= 0.98 - CSRF to XSS vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in simplemaps Simple Maps allows Stored XSS. This issue affects Simple Maps: from n/a through 0.98. CVSS: HIGH (7.1) EPSS Score: 0.02% Source: CVE April 17th, 2025 (2 months ago)