CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-31039	WordPress Category Icon plugin <= 1.0.2 - XML External Entity (XXE) vulnerability Description: Improper Restriction of XML External Entity Reference vulnerability in pixelgrade Category Icon allows XML Entity Linking. This issue affects Category Icon: from n/a through 1.0.2. CVSS: CRITICAL (9.1) EPSS Score: 0.05% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-31022	WordPress PayU India plugin <= 3.8.5 - Account Takeover vulnerability Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in PayU India PayU India allows Authentication Abuse. This issue affects PayU India: from n/a through 3.8.5. CVSS: CRITICAL (9.8) EPSS Score: 0.07% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-31019	WordPress Password Policy Manager plugin <= 2.0.4 - Account Takeover vulnerability Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Password Policy Manager allows Authentication Abuse. This issue affects Password Policy Manager: from n/a through 2.0.4. CVSS: HIGH (8.8) EPSS Score: 0.06% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-28992	WordPress SNS Anton <= 4.1 - Local File Inclusion Vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme SNS Anton allows PHP Local File Inclusion. This issue affects SNS Anton: from n/a through 4.1. CVSS: HIGH (8.1) EPSS Score: 0.15% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-28945	WordPress Valen - Sport, Fashion WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Valen - Sport, Fashion WooCommerce WordPress Theme allows PHP Local File Inclusion. This issue affects Valen - Sport, Fashion WooCommerce WordPress Theme: from n/a through 2.4. CVSS: HIGH (8.1) EPSS Score: 0.15% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-28944	WordPress Avaz <= 2.8 - Local File Inclusion Vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Avaz allows PHP Local File Inclusion. This issue affects Avaz: from n/a through 2.8. CVSS: HIGH (8.1) EPSS Score: 0.15% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-28888	WordPress GiftXtore <= 1.7.4 - Local File Inclusion Vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme GiftXtore allows PHP Local File Inclusion. This issue affects GiftXtore: from n/a through 1.7.4. CVSS: HIGH (8.1) EPSS Score: 0.15% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-27362	WordPress Petito <= 1.6.2 - Local File Inclusion Vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme Petito allows PHP Local File Inclusion. This issue affects Petito: from n/a through 1.6.2. CVSS: HIGH (8.1) EPSS Score: 0.15% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-26592	WordPress Inset <= 1.18.0 - Local File Inclusion Vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Inset allows PHP Local File Inclusion. This issue affects Inset: from n/a through 1.18.0. CVSS: HIGH (8.1) EPSS Score: 0.15% Source: CVE June 9th, 2025 (14 days ago)
CVE-2025-24770	WordPress CraftXtore <= 1.7 - Local File Inclusion Vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme CraftXtore allows PHP Local File Inclusion. This issue affects CraftXtore: from n/a through 1.7. CVSS: HIGH (8.1) EPSS Score: 0.15% Source: CVE June 9th, 2025 (14 days ago)