CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-32224	WordPress Privyr CRM plugin <= 1.0.1 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in shivammani Privyr CRM allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Privyr CRM: from n/a through 1.0.1. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32220	WordPress Salon Booking System plugin <= 10.10.7 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Dimitri Grassi Salon booking system allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Salon booking system: from n/a through 10.10.7. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32219	WordPress eaSYNC plugin <= 1.3.19 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Syntactics, Inc. eaSYNC allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects eaSYNC: from n/a through 1.3.19. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32218	WordPress TableOn – WordPress Posts Table Filterable Plugin <= 1.0.4 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in RealMag777 TableOn – WordPress Posts Table Filterable allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects TableOn – WordPress Posts Table Filterable: from n/a through 1.0.4. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32217	WordPress Ai Image Alt Text Generator for WP plugin <= 1.0.8 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ai Image Alt Text Generator for WP: from n/a through 1.0.8. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32207	WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods allows Stored XSS. This issue affects Ni WooCommerce Cost Of Goods: from n/a through 3.2.8. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32204	WordPress Split Test For Elementor Plugin <= 1.8.2 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in rocketelements Split Test For Elementor allows SQL Injection. This issue affects Split Test For Elementor: from n/a through 1.8.2. CVSS: HIGH (7.6) EPSS Score: 0.04% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32203	WordPress Falling things Plugin <= 1.08 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in manu225 Falling things allows SQL Injection. This issue affects Falling things: from n/a through 1.08. CVSS: HIGH (7.6) EPSS Score: 0.04% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32201	WordPress Xpro Theme Builder Plugin <= 1.2.8.3 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Xpro Xpro Theme Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Xpro Theme Builder: from n/a through 1.2.8.3. CVSS: MEDIUM (4.3) EPSS Score: 0.03% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32197	WordPress Piotnet Addons For Elementor plugin <= 2.4.34 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in piotnetdotcom Piotnet Addons For Elementor allows Stored XSS. This issue affects Piotnet Addons For Elementor: from n/a through 2.4.34. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE April 4th, 2025 (3 months ago)