CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-23992	WordPress Toocheke Companion plugin <= 1.166 - Stored Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leetoo Toocheke Companion allows Stored XSS. This issue affects Toocheke Companion: from n/a through 1.166. CVSS: MEDIUM (5.9) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23966	WordPress a Gateway for Pasargad Bank on WooCommerce Plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AlaFalaki a Gateway for Pasargad Bank on WooCommerce allows Reflected XSS. This issue affects a Gateway for Pasargad Bank on WooCommerce: from n/a through 2.5.2. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23959	WordPress Good Old Gallery Plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Linus Lundahl Good Old Gallery allows Reflected XSS. This issue affects Good Old Gallery: from n/a through 2.1.2. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23953	WordPress user files plugin <= 2.4.2 - Arbitrary File Upload vulnerability Description: Unrestricted Upload of File with Dangerous Type vulnerability in Innovative Solutions user files allows Upload a Web Shell to a Web Server. This issue affects user files: from n/a through 2.4.2. CVSS: CRITICAL (10.0) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23949	WordPress Improved Sale Badges – Free Version Plugin <= 1.0.1 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mihajlovic Nenad Improved Sale Badges – Free Version allows PHP Local File Inclusion. This issue affects Improved Sale Badges – Free Version: from n/a through 1.0.1. CVSS: HIGH (8.1) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23948	WordPress Background animation blocks Plugin <= 2.1.5 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebArea Background animation blocks allows PHP Local File Inclusion. This issue affects Background animation blocks: from n/a through 2.1.5. CVSS: HIGH (8.1) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23944	WordPress WOOEXIM Plugin <= 5.0.0 - PHP Object Injection vulnerability Description: Deserialization of Untrusted Data vulnerability in WOOEXIM.COM WOOEXIM allows Object Injection. This issue affects WOOEXIM: from n/a through 5.0.0. CVSS: HIGH (8.8) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23942	WordPress WP Load Gallery Plugin <= 2.1.6 - Arbitrary File Upload vulnerability Description: Unrestricted Upload of File with Dangerous Type vulnerability in NgocCode WP Load Gallery allows Upload a Web Shell to a Web Server. This issue affects WP Load Gallery: from n/a through 2.1.6. CVSS: CRITICAL (9.1) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23938	WordPress Image Gallery Box by CRUDLab Plugin <= 1.0.3 - Local File Inclusion vulnerability Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound Image Gallery Box by CRUDLab allows PHP Local File Inclusion. This issue affects Image Gallery Box by CRUDLab: from n/a through 1.0.3. CVSS: HIGH (7.5) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)
CVE-2025-23932	WordPress Quick Count Plugin <= 3.00 - PHP Object Injection vulnerability Description: Deserialization of Untrusted Data vulnerability in NotFound Quick Count allows Object Injection. This issue affects Quick Count: from n/a through 3.00. CVSS: CRITICAL (9.8) EPSS Score: 0.04% Source: CVE January 23rd, 2025 (5 months ago)