CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-27304	WordPress Contact Form 7 Star Rating with font Awesome plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelogger Contact Form 7 Star Rating with font Awesome allows Stored XSS. This issue affects Contact Form 7 Star Rating with font Awesome: from n/a through 1.3. CVSS: MEDIUM (5.9) EPSS Score: 0.04% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27303	WordPress Contact Form 7 Star Rating plugin <= 1.10 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelogger Contact Form 7 Star Rating allows Stored XSS. This issue affects Contact Form 7 Star Rating: from n/a through 1.10. CVSS: MEDIUM (5.9) EPSS Score: 0.04% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27301	WordPress NHR Options Table Manager Plugin <= 1.1.2 - Deserialization of untrusted data vulnerability Description: Deserialization of Untrusted Data vulnerability in Nazmul Hasan Robin NHR Options Table Manager allows Object Injection. This issue affects NHR Options Table Manager: from n/a through 1.1.2. CVSS: HIGH (7.2) EPSS Score: 0.06% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27300	WordPress ADFO plugin <= 1.9.1 - Deserialization of untrusted data vulnerability Description: Deserialization of Untrusted Data vulnerability in giuliopanda ADFO allows Object Injection. This issue affects ADFO: from n/a through 1.9.1. CVSS: HIGH (7.2) EPSS Score: 0.06% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27298	WordPress WP Video Posts plugin <= 3.5.1 - CSRF to Remote Code Execution (RCE) vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in cmstactics WP Video Posts allows OS Command Injection. This issue affects WP Video Posts: from n/a through 3.5.1. CVSS: HIGH (8.3) EPSS Score: 0.05% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27297	WordPress Bravo Search & Replace Plugin <= 1.0 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in guelben Bravo Search & Replace allows Blind SQL Injection. This issue affects Bravo Search & Replace: from n/a through 1.0. CVSS: HIGH (7.6) EPSS Score: 0.04% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27296	WordPress Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue Plugin <= 1.5 - Settings Change vulnerability Description: Missing Authorization vulnerability in revenueflex Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Auto Ad Inserter – Increase Google Adsense and Ad Manager Revenue: from n/a through 1.5. CVSS: HIGH (7.2) EPSS Score: 0.06% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27294	WordPress WP-Asambleas plugin <= 2.85.0 - Arbitrary Shortcode Execution vulnerability Description: Missing Authorization vulnerability in platcom WP-Asambleas allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP-Asambleas: from n/a through 2.85.0. CVSS: MEDIUM (4.8) EPSS Score: 0.04% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27290	WordPress Select Erima Zarinpal Donate Plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability Description: Cross-Site Request Forgery (CSRF) vulnerability in seyyed-amir Erima Zarinpal Donate allows Cross Site Request Forgery. This issue affects Erima Zarinpal Donate: from n/a through 1.0. CVSS: MEDIUM (4.3) EPSS Score: 0.02% Source: CVE February 24th, 2025 (4 months ago)
CVE-2025-27280	WordPress Archive Page plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alobaidi Archive Page allows DOM-Based XSS. This issue affects Archive Page: from n/a through 1.0.1. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE February 24th, 2025 (4 months ago)