CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-31833	WordPress JobBoard Job listing plugin Plugin <= 1.2.7 - Insecure Direct Object References (IDOR) vulnerability Description: Authorization Bypass Through User-Controlled Key vulnerability in themeglow JobBoard Job listing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobBoard Job listing: from n/a through 1.2.7. CVSS: MEDIUM (4.9) EPSS Score: 0.03% Source: CVE April 1st, 2025 (3 months ago)
CVE-2025-31832	WordPress ACF City Selector plugin <= 1.16.0 - Sensitive Data Exposure vulnerability Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beee ACF City Selector allows Retrieve Embedded Sensitive Data. This issue affects ACF City Selector: from n/a through 1.16.0. CVSS: MEDIUM (5.3) EPSS Score: 0.04% Source: CVE April 1st, 2025 (3 months ago)
CVE-2025-31831	WordPress AtomChat plugin <= 1.1.6 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Team AtomChat AtomChat allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AtomChat: from n/a through 1.1.6. CVSS: MEDIUM (4.3) EPSS Score: 0.03% Source: CVE April 1st, 2025 (3 months ago)
CVE-2025-31830	WordPress Printus Plugin <= 1.2.6 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Uriahs Victor Printus allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Printus: from n/a through 1.2.6. CVSS: MEDIUM (4.3) EPSS Score: 0.04% Source: CVE April 1st, 2025 (3 months ago)
CVE-2025-31829	WordPress ShopCred plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devscred ShopCred allows DOM-Based XSS. This issue affects ShopCred: from n/a through 1.2.8. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE April 1st, 2025 (3 months ago)
CVE-2025-31828	WordPress Easy!Appointments plugin <= 1.4.2 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in alextselegidis Easy!Appointments allows Cross Site Request Forgery. This issue affects Easy!Appointments: from n/a through 1.4.2. CVSS: MEDIUM (4.3) EPSS Score: 0.02% Source: CVE April 1st, 2025 (3 months ago)
CVE-2025-31826	WordPress Ni WooCommerce Cost Of Goods plugin <= 3.2.8 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ni WooCommerce Cost Of Goods: from n/a through 3.2.8. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE April 1st, 2025 (3 months ago)
CVE-2025-31824	WordPress WP Optin Wheel Plugin <= 1.4.7 - Server Side Request Forgery (SSRF) vulnerability Description: Server-Side Request Forgery (SSRF) vulnerability in Wombat Plugins WP Optin Wheel allows Server Side Request Forgery. This issue affects WP Optin Wheel: from n/a through 1.4.7. CVSS: MEDIUM (5.4) EPSS Score: 0.03% Source: CVE April 1st, 2025 (3 months ago)
CVE-2025-31823	WordPress WPoperation Elementor Addons plugin 1.1.9 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpoperations WPoperation Elementor Addons allows Stored XSS. This issue affects WPoperation Elementor Addons: from n/a through 1.1.9. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE April 1st, 2025 (3 months ago)
CVE-2025-31822	WordPress WordPress Simple HTML Sitemap plugin <= 3.2 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Ashish Ajani WP Simple HTML Sitemap allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Simple HTML Sitemap: from n/a through 3.2. CVSS: MEDIUM (5.3) EPSS Score: 0.05% Source: CVE April 1st, 2025 (3 months ago)