CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-32152	WordPress Slider a SlidersPack Plugin <= 2.3 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Essential Plugins by WP OnlineSupport Slider a SlidersPack allows PHP Local File Inclusion. This issue affects Slider a SlidersPack: from n/a through 2.3. CVSS: HIGH (7.5) EPSS Score: 0.13% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32151	WordPress BuddyForms Plugin <= 2.8.15 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Sven Lehnert BuddyForms allows PHP Local File Inclusion. This issue affects BuddyForms: from n/a through 2.8.15. CVSS: HIGH (7.5) EPSS Score: 0.13% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32150	WordPress Real Estate Manager plugin <= 7.3 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Rameez Iqbal Real Estate Manager allows PHP Local File Inclusion. This issue affects Real Estate Manager: from n/a through 7.3. CVSS: HIGH (7.5) EPSS Score: 0.13% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32149	WordPress teachPress plugin <= 9.0.11 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in winkm89 teachPress allows SQL Injection. This issue affects teachPress: from n/a through 9.0.11. CVSS: HIGH (8.5) EPSS Score: 0.03% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32148	WordPress Daisycon prijsvergelijkers plugin <= 4.8.4 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daisycon Daisycon prijsvergelijkers allows SQL Injection. This issue affects Daisycon prijsvergelijkers: from n/a through 4.8.4. CVSS: HIGH (8.5) EPSS Score: 0.03% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32147	WordPress Easy WP Optimizer Plugin <= 1.1.0 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in coothemes Easy WP Optimizer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Easy WP Optimizer: from n/a through 1.1.0. CVSS: HIGH (8.8) EPSS Score: 0.04% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32146	WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager allows PHP Local File Inclusion. This issue affects JS Job Manager: from n/a through 2.0.2. CVSS: HIGH (8.8) EPSS Score: 0.13% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32142	WordPress Motors plugin <= 1.4.65 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Stylemix Motors allows PHP Local File Inclusion. This issue affects Motors: from n/a through 1.4.65. CVSS: HIGH (8.8) EPSS Score: 0.13% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32141	WordPress MasterStudy LMS plugin <= 3.5.23 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Stylemix MasterStudy LMS allows PHP Local File Inclusion. This issue affects MasterStudy LMS: from n/a through 3.5.23. CVSS: HIGH (8.8) EPSS Score: 0.13% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32138	WordPress Easy Google Maps plugin <= 1.11.17 - XML External Entity vulnerability Description: Improper Restriction of XML External Entity Reference vulnerability in supsystic Easy Google Maps allows XML Injection. This issue affects Easy Google Maps: from n/a through 1.11.17. CVSS: MEDIUM (6.6) EPSS Score: 0.06% Source: CVE April 4th, 2025 (3 months ago)