Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-32508 |
WordPress Course Booking System plugin <= 6.0.7 - Reflected Cross Site Scripting (XSS) Vulnerability
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ComMotion Course Booking System allows Reflected XSS. This issue affects Course Booking System: from n/a through 6.0.7.
CVSS: HIGH (7.1) EPSS Score: 0.03%
April 17th, 2025 (3 days ago)
|
|
CVE-2025-32507 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aakif Kadiwala Event Espresso – Custom Email Template Shortcode allows Reflected XSS. This issue affects Event Espresso – Custom Email Template Shortcode: from n/a through 1.0.0.
CVSS: HIGH (7.1) EPSS Score: 0.03%
April 17th, 2025 (3 days ago)
|
|
CVE-2025-32506 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BenDlz AT Internet SmartTag allows Reflected XSS. This issue affects AT Internet SmartTag: from n/a through 0.2.
CVSS: HIGH (7.1) EPSS Score: 0.03%
April 17th, 2025 (3 days ago)
|
|
CVE-2025-32504 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in silvasoft Silvasoft boekhouden allows Reflected XSS. This issue affects Silvasoft boekhouden: from n/a through 3.0.5.
CVSS: HIGH (7.1) EPSS Score: 0.03%
April 17th, 2025 (3 days ago)
|
|
CVE-2025-32490 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebsiteDefender wp secure allows Stored XSS. This issue affects wp secure: from n/a through 1.2.
CVSS: HIGH (7.1) EPSS Score: 0.03%
April 17th, 2025 (3 days ago)
|
|
CVE-2025-31380 |
Description: Weak Password Recovery Mechanism for Forgotten Password vulnerability in videowhisper Paid Videochat Turnkey Site allows Password Recovery Exploitation. This issue affects Paid Videochat Turnkey Site: from n/a through 7.3.11.
CVSS: CRITICAL (9.8) EPSS Score: 0.04%
April 17th, 2025 (3 days ago)
|
|
CVE-2025-31030 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jbhovik Ray Enterprise Translation allows PHP Local File Inclusion. This issue affects Ray Enterprise Translation: from n/a through 1.7.0.
CVSS: HIGH (7.5) EPSS Score: 0.1%
April 17th, 2025 (3 days ago)
|
|
CVE-2025-31018 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FireDrum FireDrum Email Marketing allows Reflected XSS. This issue affects FireDrum Email Marketing: from n/a through 1.64.
CVSS: HIGH (7.1) EPSS Score: 0.03%
April 17th, 2025 (3 days ago)
|
|
CVE-2025-31006 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arete-it Activity Reactions For Buddypress allows Reflected XSS. This issue affects Activity Reactions For Buddypress: from n/a through 1.0.22.
CVSS: HIGH (7.1) EPSS Score: 0.03%
April 17th, 2025 (3 days ago)
|
|
CVE-2025-29043 |
Description: An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x417234
EPSS Score: 0.05%
April 17th, 2025 (3 days ago)
|