CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-27267	WordPress Random Quotes Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in srcoley Random Quotes allows Reflected XSS. This issue affects Random Quotes: from n/a through 1.3. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-27015	WordPress Hostiko Theme < 30.1 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in designingmedia Hostiko allows PHP Local File Inclusion.This issue affects Hostiko: from n/a before 30.1. CVSS: HIGH (7.5) EPSS Score: 0.1% SSVC Exploitation: none Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-27014	WordPress Hostiko Theme < 30.1 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designingmedia Hostiko allows Reflected XSS.This issue affects Hostiko: from n/a before 30.1. CVSS: HIGH (7.1) EPSS Score: 0.04% SSVC Exploitation: none Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26986	WordPress Pearl Theme < 3.4.8 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in StylemixThemes Pearl - Corporate Business allows PHP Local File Inclusion.This issue affects Pearl - Corporate Business: from n/a before 3.4.8. CVSS: HIGH (8.1) EPSS Score: 0.13% SSVC Exploitation: none Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26941	WordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Andy Moyle Church Admin allows SQL Injection.This issue affects Church Admin: from n/a through 5.0.18. CVSS: CRITICAL (9.3) EPSS Score: 0.04% SSVC Exploitation: none Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26929	WordPress Accounting for WooCommerce plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NOUS Ouvert Utile et Simple Accounting for WooCommerce allows Stored XSS.This issue affects Accounting for WooCommerce: from n/a through 1.6.8. CVSS: MEDIUM (5.9) EPSS Score: 0.03% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26923	WordPress Event post plugin <= 5.9.8 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post allows Stored XSS.This issue affects Event post: from n/a through 5.9.8. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26922	WordPress AuraMart theme <= 2.0.7 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in techthemes AuraMart allows Stored XSS.This issue affects AuraMart: from n/a through 2.0.7. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26869	WordPress Build theme <= 1.0.3 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Build allows Stored XSS.This issue affects Build: from n/a through 1.0.3. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26747	WordPress RainbowNews theme <= 1.0.7 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 99colorthemes RainbowNews allows Stored XSS.This issue affects RainbowNews: from n/a through 1.0.7. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE March 26th, 2025 (3 months ago)