CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-32137	WordPress s2Member plugin <= 250214 - Local File Inclusion vulnerability Description: Relative Path Traversal vulnerability in Cristián Lávaque s2Member allows Path Traversal. This issue affects s2Member: from n/a through 250214. CVSS: MEDIUM (4.9) EPSS Score: 0.05% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32136	WordPress ActiveCampaign Plugin <= 8.1.16 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in activecampaign ActiveCampaign allows Stored XSS. This issue affects ActiveCampaign: from n/a through 8.1.16. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32135	WordPress Split Test For Elementor plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rocketelements Split Test For Elementor allows Stored XSS. This issue affects Split Test For Elementor: from n/a through 1.8.3. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32134	WordPress URL Shortify Plugin <= 1.10.4 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders URL Shortify allows Stored XSS. This issue affects URL Shortify: from n/a through 1.10.4. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32133	WordPress Secure Copy Content Protection and Content Locking plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Secure Copy Content Protection and Content Locking allows Stored XSS. This issue affects Secure Copy Content Protection and Content Locking: from n/a through 4.5.1. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32132	WordPress FunnelCockpit Plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelCockpit FunnelCockpit allows Stored XSS. This issue affects FunnelCockpit: from n/a through 1.4.2. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32131	WordPress Social Intents plugin <= 1.6.14 - Cross Site Scripting (XSS) Vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in socialintents Social Intents allows Stored XSS. This issue affects Social Intents: from n/a through 1.6.14. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32130	WordPress Posts Footer Manager plugin <= 2.2.0 - Cross Site Scripting (XSS) Vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Risk Migitation, Inc. Posts Footer Manager allows Stored XSS. This issue affects Posts Footer Manager: from n/a through 2.2.0. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32129	WordPress Welcome Bar plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Risk Migitation, Inc. Welcome Bar allows Stored XSS. This issue affects Welcome Bar: from n/a through 2.0.4. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE April 4th, 2025 (3 months ago)
CVE-2025-32127	WordPress onOffice for WP-Websites plugin <= 5.7 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in onOffice GmbH onOffice for WP-Websites allows SQL Injection. This issue affects onOffice for WP-Websites: from n/a through 5.7. CVSS: HIGH (7.6) EPSS Score: 0.04% Source: CVE April 4th, 2025 (3 months ago)