CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-26564	WordPress GNUCommerce Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kagla GNUCommerce allows Reflected XSS. This issue affects GNUCommerce: from n/a through 1.5.4. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26560	WordPress WP Contact Form III Plugin <= 1.6.2d - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Contact Form III allows Reflected XSS. This issue affects WP Contact Form III: from n/a through 1.6.2d. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26559	WordPress Secure Invites plugin <= 1.2.5 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Secure Invites allows Reflected XSS. This issue affects Secure Invites: from n/a through 1.3. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26546	WordPress Cookies Pro plugin <= 1.0 - CSRF to Stored XSS vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Cookies Pro allows Reflected XSS. This issue affects Cookies Pro: from n/a through 1.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26544	WordPressUTM tags + Landing page plugin <= 1.4 - CSRF to Stored XSS vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound UTM tags tracking for Contact Form 7 allows Reflected XSS. This issue affects UTM tags tracking for Contact Form 7: from n/a through 2.1. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26542	WordPress Zalo Live Chat Plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Zalo Live Chat allows Reflected XSS. This issue affects Zalo Live Chat: from n/a through 1.1.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26541	WordPress Bitcoin / AltCoin Payment Gateway for WooCommerce plugin <= 1.7.6 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeSolz Bitcoin / AltCoin Payment Gateway for WooCommerce allows Reflected XSS. This issue affects Bitcoin / AltCoin Payment Gateway for WooCommerce: from n/a through 1.7.6. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26537	WordPress GDPR Tools plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound GDPR Tools allows Stored XSS. This issue affects GDPR Tools: from n/a through 1.0.2. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-26536	WordPress Another Events Calendar Plugin <= 1.7.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yendif Player Another Events Calendar allows Reflected XSS. This issue affects Another Events Calendar: from n/a through 1.7.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)
CVE-2025-25134	WordPress Theme Demo Bar Plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Theme Demo Bar allows Reflected XSS. This issue affects Theme Demo Bar: from n/a through 1.6.3. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE March 26th, 2025 (3 months ago)