CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-23652	WordPress Add custom content after post plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Add custom content after post allows Reflected XSS. This issue affects Add custom content after post: from n/a through 1.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 15th, 2025 (5 months ago)
CVE-2025-23651	WordPress Scroll Top plugin <= 1.3.3 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Scroll Top allows Reflected XSS. This issue affects Scroll Top: from n/a through 1.3.3. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 15th, 2025 (5 months ago)
CVE-2025-23650	WordPress Tidy.ro plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in razvypp Tidy.ro allows Reflected XSS. This issue affects Tidy.ro: from n/a through 1.3. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 15th, 2025 (5 months ago)
CVE-2025-23648	WordPress AdsMiddle plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wjharil AdsMiddle allows Reflected XSS. This issue affects AdsMiddle: from n/a through 1.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 15th, 2025 (5 months ago)
CVE-2025-23647	WordPress WP-Clap plugin <= 1.5 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ariagle WP-Clap allows Reflected XSS. This issue affects WP-Clap: from n/a through 1.5. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 15th, 2025 (5 months ago)
CVE-2025-23646	WordPress Library Instruction Recorder plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt Brooks Library Instruction Recorder allows Reflected XSS. This issue affects Library Instruction Recorder: from n/a through 1.1.4. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 15th, 2025 (5 months ago)
CVE-2025-23598	WordPress Recip.ly plugin <= 1.1.8 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in [email protected] Recip.ly allows Reflected XSS. This issue affects Recip.ly: from n/a through 1.1.8. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 15th, 2025 (5 months ago)
CVE-2025-23571	WordPress Internal Links Generator plugin <= 3.51 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Internal Links Generator allows Reflected XSS. This issue affects Internal Links Generator: from n/a through 3.51. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 15th, 2025 (5 months ago)
CVE-2025-23568	WordPress WP Login Attempt Log plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fredsted WP Login Attempt Log allows Reflected XSS. This issue affects WP Login Attempt Log: from n/a through 1.3. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE February 15th, 2025 (5 months ago)
CVE-2025-23534	WordPress WPLingo plugin <= 1.1.2 - Arbitrary Content Deletion vulnerability Description: Missing Authorization vulnerability in Mark Winiarski WPLingo allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WPLingo: from n/a through 1.1.2. CVSS: MEDIUM (6.5) EPSS Score: 0.04% Source: CVE February 15th, 2025 (5 months ago)