Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-39540 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rhys Wynne WP Flipclock allows DOM-Based XSS. This issue affects WP Flipclock: from n/a through 1.9.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39538 |
Description: Unrestricted Upload of File with Dangerous Type vulnerability in Mathieu Chartier WP-Advanced-Search allows Upload a Web Shell to a Web Server. This issue affects WP-Advanced-Search: from n/a through 3.3.9.3.
CVSS: MEDIUM (6.6) EPSS Score: 0.03%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39531 |
Description: Missing Authorization vulnerability in slazzercom Slazzer Background Changer allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Slazzer Background Changer: from n/a through 3.14.
CVSS: MEDIUM (5.3) EPSS Score: 0.04%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39530 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in dsky Site Search 360 allows Stored XSS. This issue affects Site Search 360: from n/a through 2.1.7.
CVSS: HIGH (7.1) EPSS Score: 0.01%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39529 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robin Cornett Scriptless Social Sharing allows Stored XSS. This issue affects Scriptless Social Sharing: from n/a through 3.2.4.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39528 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS. This issue affects Rescue Shortcodes: from n/a through 3.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39525 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Logo Carousel Slider allows Stored XSS. This issue affects Logo Carousel Slider: from n/a through 2.1.3.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39524 |
Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in bPlugins Html5 Audio Player allows Stored XSS. This issue affects Html5 Audio Player: from n/a through 2.2.28.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39522 |
Description: Missing Authorization vulnerability in Sebastian Lee Dynamic Post allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Dynamic Post: from n/a through 4.10.
CVSS: MEDIUM (5.4) EPSS Score: 0.04%
April 16th, 2025 (4 days ago)
|
|
CVE-2025-39520 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham Checkout Files Upload for WooCommerce allows Stored XSS. This issue affects Checkout Files Upload for WooCommerce: from n/a through 2.2.0.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 16th, 2025 (4 days ago)
|