CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-31396	WordPress FLAP - Business WordPress Theme <= 1.5 - PHP Object Injection Vulnerability Description: Deserialization of Untrusted Data vulnerability in themeton FLAP - Business WordPress Theme allows Object Injection. This issue affects FLAP - Business WordPress Theme: from n/a through 1.5. CVSS: CRITICAL (9.8) EPSS Score: 0.05% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-31061	WordPress Wishlist plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in redqteam Wishlist allows Reflected XSS. This issue affects Wishlist: from n/a through 2.1.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-31059	WordPress WBW Product Table PRO <= 2.1.3 - SQL Injection Vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in woobewoo WBW Product Table PRO allows SQL Injection. This issue affects WBW Product Table PRO: from n/a through 2.1.3. CVSS: CRITICAL (9.3) EPSS Score: 0.04% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-31058	WordPress Revolution Video Player plugin <= 2.9.2 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Revolution Video Player allows Reflected XSS. This issue affects Revolution Video Player: from n/a through 2.9.2. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-31057	WordPress Universal Video Player plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player allows Reflected XSS. This issue affects Universal Video Player: from n/a through 1.4.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-31052	WordPress The Fashion - Model Agency One Page Beauty Theme <= 1.4.4 - Deserialization of untrusted data Vulnerability Description: Deserialization of Untrusted Data vulnerability in themeton The Fashion - Model Agency One Page Beauty Theme allows Object Injection. This issue affects The Fashion - Model Agency One Page Beauty Theme: from n/a through 1.4.4. CVSS: CRITICAL (9.8) EPSS Score: 0.05% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-31050	WordPress Apptha Slider Gallery plugin <= 2.5 - Arbitrary File Read vulnerability Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in appthaplugins Apptha Slider Gallery allows Path Traversal. This issue affects Apptha Slider Gallery: from n/a through 2.5. CVSS: HIGH (7.5) EPSS Score: 0.06% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-31045	WordPress elfsight Contact Form widget <= 2.3.1 - Sensitive Data Exposure Vulnerability Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in elfsight elfsight Contact Form widget allows Retrieve Embedded Sensitive Data. This issue affects elfsight Contact Form widget: from n/a through 2.3.1. CVSS: HIGH (7.5) EPSS Score: 0.04% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-31039	WordPress Category Icon plugin <= 1.0.2 - XML External Entity (XXE) vulnerability Description: Improper Restriction of XML External Entity Reference vulnerability in pixelgrade Category Icon allows XML Entity Linking. This issue affects Category Icon: from n/a through 1.0.2. CVSS: CRITICAL (9.1) EPSS Score: 0.05% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-31022	WordPress PayU India plugin <= 3.8.5 - Account Takeover vulnerability Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in PayU India PayU India allows Authentication Abuse. This issue affects PayU India: from n/a through 3.8.5. CVSS: CRITICAL (9.8) EPSS Score: 0.07% Source: CVE June 9th, 2025 (14 days ago)