CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-26928	WordPress Order Limit for WooCommerce plugin <= 3.0.2 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in xfinitysoft Order Limit for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Order Limit for WooCommerce: from n/a through 3.0.2. CVSS: MEDIUM (4.3) EPSS Score: 0.03% Source: CVE February 25th, 2025 (4 months ago)
CVE-2025-26926	WordPress Booknetic plugin <= 4.0.9 - Cross Site Request Forgery (CSRF) vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in NotFound Booknetic. This issue affects Booknetic: from n/a through 4.0.9. CVSS: MEDIUM (4.3) EPSS Score: 0.02% Source: CVE February 25th, 2025 (4 months ago)
CVE-2025-26915	WordPress Wishlist Plugin <= 1.0.41 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PickPlugins Wishlist allows SQL Injection. This issue affects Wishlist: from n/a through 1.0.41. CVSS: HIGH (8.5) EPSS Score: 0.04% Source: CVE February 25th, 2025 (4 months ago)
CVE-2025-26913	WordPress AR for WordPress plugin <= 7.7 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webandprint AR For WordPress allows DOM-Based XSS. This issue affects AR For WordPress: from n/a through 7.7. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE February 25th, 2025 (4 months ago)
CVE-2025-26912	WordPress Easy Elementor Addons plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HashThemes Easy Elementor Addons allows Stored XSS. This issue affects Easy Elementor Addons: from n/a through 2.1.6. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE February 25th, 2025 (4 months ago)
CVE-2025-26911	WordPress System Dashboard plugin <= 2.8.18 - Sensitive Data Exposure vulnerability Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Bowo System Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects System Dashboard: from n/a through 2.8.18. CVSS: MEDIUM (4.3) EPSS Score: 0.03% Source: CVE February 25th, 2025 (4 months ago)
CVE-2025-26907	WordPress Estatik Mortgage Calculator plugin <= 2.0.12 - Local File Inclusion vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Estatik Mortgage Calculator Estatik allows Stored XSS. This issue affects Mortgage Calculator Estatik: from n/a through 2.0.12. CVSS: HIGH (7.5) EPSS Score: 0.06% Source: CVE February 25th, 2025 (4 months ago)
CVE-2025-26905	WordPress Estatik plugin <= 4.1.9 - Local File Inclusion vulnerability Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Estatik Estatik allows PHP Local File Inclusion. This issue affects Estatik: from n/a through 4.1.9. CVSS: HIGH (7.5) EPSS Score: 0.04% Source: CVE February 25th, 2025 (4 months ago)
CVE-2025-26904	WordPress WP Responsive Auto Fit Text plugin <= 0.2 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gal_op WP Responsive Auto Fit Text allows DOM-Based XSS. This issue affects WP Responsive Auto Fit Text: from n/a through 0.2. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE February 25th, 2025 (4 months ago)
CVE-2025-26900	WordPress Flexmls® IDX Plugin Plugin <= 3.14.27 - PHP Object Injection vulnerability Description: Deserialization of Untrusted Data vulnerability in flexmls Flexmls® IDX allows Object Injection. This issue affects Flexmls® IDX: from n/a through 3.14.27. CVSS: CRITICAL (9.8) EPSS Score: 0.06% Source: CVE February 25th, 2025 (4 months ago)