CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-22700	WordPress Traveler Code plugin <= 3.1.0 - Subscriber+ Arbitrary SQL Execution vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Traveler Code. This issue affects Traveler Code: from n/a through 3.1.0. CVSS: HIGH (8.5) EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)
CVE-2025-22699	WordPress Traveler Code plugin <= 3.1.0 - Unauthenticated Arbitrary SQL Execution vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Traveler Code. This issue affects Traveler Code: from n/a through 3.1.0. CVSS: CRITICAL (9.0) EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)
CVE-2025-22697	WordPress Responsive Blocks plugin <= 1.9.9 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyberChimps Responsive Blocks allows Reflected XSS. This issue affects Responsive Blocks: from n/a through 1.9.9. CVSS: MEDIUM (6.5) EPSS Score: 0.05% Source: CVE February 5th, 2025 (5 months ago)
CVE-2025-22696	WordPress Document Block – Upload & Embed Docs, PDF, PPT, XLS or Any Documents plugin <= 1.1.0 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in EmbedPress Document Block – Upload & Embed Docs. This issue affects Document Block – Upload & Embed Docs: from n/a through 1.1.0. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)
CVE-2025-22675	WordPress Alert Box Block plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Alert Box Block – Display notice/alerts in the front end allows Stored XSS. This issue affects Alert Box Block – Display notice/alerts in the front end: from n/a through 1.1.0. CVSS: MEDIUM (6.5) EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)
CVE-2025-22674	WordPress Product Blocks for WooCommerce plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Get Bowtied Product Blocks for WooCommerce allows Stored XSS. This issue affects Product Blocks for WooCommerce: from n/a through 1.9.1. CVSS: MEDIUM (6.5) EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)
CVE-2025-22664	WordPress Survey Maker Plugin <= 5.1.3.5 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Survey Maker team Survey Maker allows Stored XSS. This issue affects Survey Maker: from n/a through 5.1.3.5. CVSS: MEDIUM (5.9) EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)
CVE-2025-22662	WordPress SendPulse Email Marketing Newsletter plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SendPulse SendPulse Email Marketing Newsletter allows Stored XSS. This issue affects SendPulse Email Marketing Newsletter: from n/a through 2.1.5. CVSS: MEDIUM (6.5) EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)
CVE-2025-22653	WordPress Music Press Pro plugin <=1.4.6 - Stored Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in templaza Music Press Pro allows Stored XSS. This issue affects Music Press Pro: from n/a through 1.4.6. CVSS: MEDIUM (6.5) EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)
CVE-2025-22643	WordPress OnePress theme <= 2.3.11 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in FameThemes OnePress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects OnePress: from n/a through 2.3.11. CVSS: MEDIUM (4.3) EPSS Score: 0.04% Source: CVE February 5th, 2025 (5 months ago)