CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-31585	WordPress Leadfox for WordPress plugin <= 2.1.8 - CSRF to Stored XSS vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in leadfox Leadfox for WordPress allows Cross Site Request Forgery. This issue affects Leadfox for WordPress: from n/a through 2.1.8. CVSS: HIGH (7.1) EPSS Score: 0.02% Source: CVE March 31st, 2025 (3 months ago)
CVE-2025-31584	WordPress Elfsight Testimonials Slider plugin <= 1.0.1 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in elfsight Elfsight Testimonials Slider allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elfsight Testimonials Slider: from n/a through 1.0.1. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE March 31st, 2025 (3 months ago)
CVE-2025-31583	WordPress WP Copy Media URL plugin <= 2.1 - CSRF to Stored XSS vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in Ashish Ajani WP Copy Media URL allows Stored XSS. This issue affects WP Copy Media URL: from n/a through 2.1. CVSS: HIGH (7.1) EPSS Score: 0.02% Source: CVE March 31st, 2025 (3 months ago)
CVE-2025-31577	WordPress Appointify plugin <= 1.0.8 - Arbitrary File Upload vulnerability Description: Unrestricted Upload of File with Dangerous Type vulnerability in appointify Appointify allows Upload a Web Shell to a Web Server. This issue affects Appointify: from n/a through 1.0.8. CVSS: MEDIUM (6.6) EPSS Score: 0.05% Source: CVE March 31st, 2025 (3 months ago)
CVE-2025-31576	WordPress PostmarkApp Email Integrator plugin <= 2.4 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Gagan Deep Singh PostmarkApp Email Integrator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PostmarkApp Email Integrator: from n/a through 2.4. CVSS: MEDIUM (4.3) EPSS Score: 0.03% Source: CVE March 31st, 2025 (3 months ago)
CVE-2025-31575	WordPress Flag Icons plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Vasilis Triantafyllou Flag Icons allows Stored XSS. This issue affects Flag Icons: from n/a through 2.2. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE March 31st, 2025 (3 months ago)
CVE-2025-31574	WordPress Custom Content Scrollbar plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SoftHopper Custom Content Scrollbar allows Stored XSS. This issue affects Custom Content Scrollbar: from n/a through 1.3. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE March 31st, 2025 (3 months ago)
CVE-2025-31572	WordPress Multi Days Events and Multi Events in One Day Calendar plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in v20202020 Multi Days Events and Multi Events in One Day Calendar allows Cross Site Request Forgery. This issue affects Multi Days Events and Multi Events in One Day Calendar: from n/a through 1.1.3. CVSS: MEDIUM (4.3) EPSS Score: 0.02% Source: CVE March 31st, 2025 (3 months ago)
CVE-2025-31570	WordPress Related Posts Widget with Thumbnails plugin <= 1.2 - CSRF to Stored XSS vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in wp-buy Related Posts Widget with Thumbnails allows Stored XSS. This issue affects Related Posts Widget with Thumbnails: from n/a through 1.2. CVSS: HIGH (7.1) EPSS Score: 0.02% Source: CVE March 31st, 2025 (3 months ago)
CVE-2025-31569	WordPress wordpress related Posts with thumbnails plugin <= 3.0.0.1 - CSRF to Stored XSS vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in wp-buy wordpress related Posts with thumbnails allows Stored XSS. This issue affects wordpress related Posts with thumbnails: from n/a through 3.0.0.1. CVSS: HIGH (7.1) EPSS Score: 0.02% Source: CVE March 31st, 2025 (3 months ago)