Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-39409 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pressaholic WordPress Video Robot - The Ultimate Video Importer.This issue affects WordPress Video Robot - The Ultimate Video Importer: from n/a through 1.20.0.
CVSS: HIGH (7.1) EPSS Score: 0.04%
May 19th, 2025 (21 days ago)
|
|
CVE-2025-39407 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Caseproof, LLC Memberpress allows Reflected XSS.This issue affects Memberpress: from n/a through 1.11.37.
CVSS: HIGH (7.1) EPSS Score: 0.04%
May 19th, 2025 (21 days ago)
|
|
CVE-2025-39406 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in mojoomla WPAMS allows PHP Local File Inclusion.This issue affects WPAMS: from n/a through 44.0.
CVSS: CRITICAL (9.8) EPSS Score: 0.15%
May 19th, 2025 (21 days ago)
|
|
CVE-2025-39405 |
Description: Incorrect Privilege Assignment vulnerability in mojoomla WPAMS allows Privilege Escalation.This issue affects WPAMS: from n/a through 44.0 (17-08-2023).
CVSS: HIGH (8.8) EPSS Score: 0.04%
May 19th, 2025 (21 days ago)
|
|
CVE-2025-39403 |
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPAMS allows SQL Injection.This issue affects WPAMS: from n/a through 44.0 (17-08-2023).
CVSS: HIGH (8.5) EPSS Score: 0.03%
May 19th, 2025 (21 days ago)
|
|
CVE-2025-39402 |
Description: Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS allows Upload a Web Shell to a Web Server.This issue affects WPAMS: from n/a through 44.0 (17-08-2023).
CVSS: CRITICAL (9.9) EPSS Score: 0.05%
May 19th, 2025 (21 days ago)
|
|
CVE-2025-39401 |
Description: Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS allows Upload a Web Shell to a Web Server.This issue affects WPAMS: from n/a through 44.0 (17-08-2023).
CVSS: CRITICAL (10.0) EPSS Score: 0.06%
May 19th, 2025 (21 days ago)
|
|
CVE-2025-39395 |
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPAMS allows SQL Injection.This issue affects WPAMS: from n/a through 44.0 (17-08-2023).
CVSS: CRITICAL (9.3) EPSS Score: 0.04%
May 19th, 2025 (21 days ago)
|
|
CVE-2025-39393 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla Hospital Management System allows Reflected XSS.This issue affects Hospital Management System: from n/a through 47.0 (20-11-2023).
CVSS: HIGH (7.1) EPSS Score: 0.04%
May 19th, 2025 (21 days ago)
|
|
CVE-2025-39392 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla WPAMS allows Reflected XSS.This issue affects WPAMS: from n/a through 44.0 (17-08-2023).
CVSS: HIGH (7.1) EPSS Score: 0.04%
May 19th, 2025 (21 days ago)
|