Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-39601 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Custom CSS, JS & PHP allows Remote Code Inclusion. This issue affects Custom CSS, JS & PHP: from n/a through 2.4.1.
CVSS: CRITICAL (9.6) EPSS Score: 0.02%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39600 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for WooCommerce and QuickBooks allows Cross Site Request Forgery. This issue affects Integration for WooCommerce and QuickBooks: from n/a through 1.3.1.
CVSS: MEDIUM (4.3) EPSS Score: 0.01%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39599 |
Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Webilia Inc. Listdom allows Phishing. This issue affects Listdom: from n/a through 4.0.0.
CVSS: MEDIUM (4.7) EPSS Score: 0.03%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39598 |
Description: Path Traversal vulnerability in Quý Lê 91 Administrator Z allows Path Traversal. This issue affects Administrator Z: from n/a through 2025.03.28.
CVSS: MEDIUM (4.9) EPSS Score: 0.04%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39597 |
Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Arthur Yarwood Fast eBay Listings allows Phishing. This issue affects Fast eBay Listings: from n/a through 2.12.15.
CVSS: MEDIUM (4.7) EPSS Score: 0.03%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39593 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in EverAccounting Ever Accounting allows Cross Site Request Forgery. This issue affects Ever Accounting: from n/a through 2.1.5.
CVSS: MEDIUM (4.3) EPSS Score: 0.01%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39592 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle Subscribe to Unlock Lite allows PHP Local File Inclusion. This issue affects Subscribe to Unlock Lite: from n/a through 1.3.0.
CVSS: HIGH (7.5) EPSS Score: 0.11%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39591 |
Description: Missing Authorization vulnerability in WP Shuffle WP Subscription Forms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Subscription Forms: from n/a through 1.2.3.
CVSS: MEDIUM (5.4) EPSS Score: 0.04%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39590 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor allows Stored XSS. This issue affects Essential Addons for Elementor: from n/a through 6.1.9.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39589 |
Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper Essential Addons for Elementor allows Retrieve Embedded Sensitive Data. This issue affects Essential Addons for Elementor: from n/a through 6.1.9.
CVSS: MEDIUM (4.3) EPSS Score: 0.03%
April 16th, 2025 (4 days ago)
|