CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-32205	WordPress piotnetforms plugin <=1.0.30 - Path Traversal vulnerability Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in piotnetdotcom Piotnet Forms. This issue affects Piotnet Forms: from n/a through 1.0.30. CVSS: LOW (2.7) EPSS Score: 0.05% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32202	WordPress Insert or Embed Articulate Content into WordPress plugin <= 4.3000000025 - Arbitrary File Upload vulnerability Description: Unrestricted Upload of File with Dangerous Type vulnerability in Brian Batt - elearningfreak.com Insert or Embed Articulate Content into WordPress allows Upload a Web Shell to a Web Server. This issue affects Insert or Embed Articulate Content into WordPress: from n/a through 4.3000000025. CVSS: CRITICAL (9.1) EPSS Score: 0.05% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32199	WordPress Contact Form Builder by vcita plugin <= 4.10.2 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyale-vc Contact Form Builder by vcita. This issue affects Contact Form Builder by vcita: from n/a through 4.10.2. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32198	WordPress Brizy plugin <= 2.6.14 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themefusecom Brizy. This issue affects Brizy: from n/a through 2.6.14. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32160	WordPress EventON plugin <= 2.3.2 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ashan Perera EventON. This issue affects EventON: from n/a through 2.3.2. CVSS: HIGH (7.5) EPSS Score: 0.13% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32158	WordPress aThemes Addons for Elementor plugin <= 1.0.15 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in aThemes aThemes Addons for Elementor. This issue affects aThemes Addons for Elementor: from n/a through 1.0.15. CVSS: HIGH (7.5) EPSS Score: 0.13% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32145	WordPress WpEvently plugin <= 4.3.5 - PHP Object Injection vulnerability Description: Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently allows Object Injection. This issue affects WpEvently: from n/a through 4.3.5. CVSS: HIGH (8.8) EPSS Score: 0.05% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32140	WordPress WP Remote Thumbnail Plugin <= 1.3.1 - Arbitrary File Upload vulnerability Description: Unrestricted Upload of File with Dangerous Type vulnerability in Nirmal Kumar Ram WP Remote Thumbnail allows Upload a Web Shell to a Web Server. This issue affects WP Remote Thumbnail: from n/a through 1.3.1. CVSS: CRITICAL (9.9) EPSS Score: 0.05% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32139	WordPress Lightbox & Modal Popup WordPress Plugin – FooBox plugin <= 2.7.33 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bradvin FooBox Image Lightbox . This issue affects FooBox Image Lightbox : from n/a through 2.7.33. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 10th, 2025 (2 months ago)
CVE-2025-32128	WordPress Nearby Locations Plugin <= 1.1.1 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in aaronfrey Nearby Locations allows SQL Injection. This issue affects Nearby Locations: from n/a through 1.1.1. CVSS: HIGH (7.6) EPSS Score: 0.04% Source: CVE April 10th, 2025 (2 months ago)