CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-22782	WordPress WR Price List Manager For Woocommerce plugin <= 1.0.8 - Remote Code Execution (RCE) vulnerability Description: Unrestricted Upload of File with Dangerous Type vulnerability in Web Ready Now WR Price List Manager For Woocommerce allows Upload a Web Shell to a Web Server.This issue affects WR Price List Manager For Woocommerce: from n/a through 1.0.8. CVSS: CRITICAL (9.9) EPSS Score: 0.04% Source: CVE January 16th, 2025 (6 months ago)
CVE-2025-22781	WordPress Nativery Plugin plugin <= 0.1.6 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nativery Developer Nativery allows DOM-Based XSS.This issue affects Nativery: from n/a through 0.1.6. CVSS: MEDIUM (6.5) EPSS Score: 0.04% Source: CVE January 16th, 2025 (6 months ago)
CVE-2025-22780	WordPress wp-pano Plugin <= 1.17 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alexey Yuzhakov wp-pano allows Stored XSS.This issue affects wp-pano: from n/a through 1.17. CVSS: MEDIUM (6.5) EPSS Score: 0.04% Source: CVE January 16th, 2025 (6 months ago)
CVE-2025-22779	WordPress WP News Sliders plugin <= 1.0 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in Ugur CELIK WP News Sliders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP News Sliders: from n/a through 1.0. CVSS: MEDIUM (4.3) EPSS Score: 0.04% Source: CVE January 16th, 2025 (6 months ago)
CVE-2025-22778	WordPress Lijit Search Plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lijit Networks Inc. and Crowd Favorite Lijit Search allows Reflected XSS.This issue affects Lijit Search: from n/a through 1.1. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 16th, 2025 (6 months ago)
CVE-2025-22776	WordPress WP Bulletin Board Plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jay Carter WP Bulletin Board allows Reflected XSS.This issue affects WP Bulletin Board: from n/a through 1.1.4. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 16th, 2025 (6 months ago)
CVE-2025-22773	WordPress Htaccess File Editor <= 1.0.19 - Broken Authentication vulnerability Description: Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WPChill Htaccess File Editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Htaccess File Editor: from n/a through 1.0.19. CVSS: MEDIUM (5.3) EPSS Score: 0.04% Source: CVE January 16th, 2025 (6 months ago)
CVE-2025-22769	WordPress Multifox theme <= 1.3.7 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Brahma Multifox allows Stored XSS.This issue affects Multifox: from n/a through 1.3.7. CVSS: MEDIUM (6.5) EPSS Score: 0.04% Source: CVE January 16th, 2025 (6 months ago)
CVE-2025-22766	WordPress Zarinpal Paid Download Plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Masoud Amini Zarinpal Paid Download allows Reflected XSS.This issue affects Zarinpal Paid Download: from n/a through 2.3. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 16th, 2025 (6 months ago)
CVE-2025-22765	WordPress WP Order By Plugin <= 1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uri Weil WP Order By allows Reflected XSS.This issue affects WP Order By: from n/a through 1.4.2. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 16th, 2025 (6 months ago)