Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-22678 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mythemes my white allows Reflected XSS.This issue affects my white: from n/a through 2.0.8.
CVSS: HIGH (7.1) EPSS Score: 0.04%
May 19th, 2025 (21 days ago)
|
|
CVE-2024-33939 |
Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Masteriyo Masteriyo - LMS. Unauth access to course progress.This issue affects Masteriyo - LMS: from n/a through 1.7.3.
CVSS: MEDIUM (5.3) EPSS Score: 0.04%
May 19th, 2025 (21 days ago)
|
|
Description: Alleged Sale of Unauthorized Admin Access to a UK WordPress Gambling Platform
May 19th, 2025 (21 days ago)
|
|
CVE-2025-48346 |
Description: Missing Authorization vulnerability in Etsy360 Embed and Integrate Etsy Shop allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Embed and Integrate Etsy Shop: from n/a through 1.0.4.
CVSS: MEDIUM (5.3) EPSS Score: 0.04%
May 19th, 2025 (21 days ago)
|
|
CVE-2025-48344 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in ed4becky Rootspersona allows Cross Site Request Forgery. This issue affects Rootspersona: from n/a through 3.7.5.
CVSS: MEDIUM (5.4) EPSS Score: 0.02%
May 19th, 2025 (21 days ago)
|
|
CVE-2025-48342 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in RedefiningTheWeb Dynamic Pricing & Discounts Lite for WooCommerce allows Cross Site Request Forgery. This issue affects Dynamic Pricing & Discounts Lite for WooCommerce: from n/a through 2.0.3.
CVSS: MEDIUM (5.4) EPSS Score: 0.02%
May 19th, 2025 (21 days ago)
|
|
CVE-2025-48341 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker by 10Web allows Stored XSS. This issue affects Form Maker by 10Web: from n/a through 1.15.33.
CVSS: MEDIUM (5.9) EPSS Score: 0.03%
May 19th, 2025 (21 days ago)
|
|
CVE-2025-48288 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons for Elementor allows Stored XSS. This issue affects ElementInvader Addons for Elementor: from n/a through 1.3.5.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
May 19th, 2025 (21 days ago)
|
|
CVE-2025-48285 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in sbouey Falang multilanguage allows Cross Site Request Forgery. This issue affects Falang multilanguage: from n/a through 1.3.61.
CVSS: MEDIUM (4.3) EPSS Score: 0.02%
May 19th, 2025 (21 days ago)
|
|
CVE-2025-48284 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in shohei.tanaka Japanized For WooCommerce allows Cross Site Request Forgery. This issue affects Japanized For WooCommerce: from n/a through 2.6.40.
CVSS: MEDIUM (5.4) EPSS Score: 0.02%
May 19th, 2025 (21 days ago)
|