Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-48257 |
Description: Missing Authorization vulnerability in Projectopia Projectopia allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Projectopia: from n/a through 5.1.17.
CVSS: MEDIUM (6.5) EPSS Score: 0.04%
May 19th, 2025 (22 days ago)
|
|
CVE-2025-48256 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes Import Social Events allows Stored XSS. This issue affects Import Social Events: from n/a through 1.8.5.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
May 19th, 2025 (22 days ago)
|
|
CVE-2025-48255 |
Description: Cross-Site Request Forgery (CSRF) vulnerability in videowhisper Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP allows Cross Site Request Forgery. This issue affects Broadcast Live Video – Live Streaming : WebRTC, HLS, RTSP, RTMP: from n/a through 6.2.4.
CVSS: MEDIUM (4.3) EPSS Score: 0.02%
May 19th, 2025 (22 days ago)
|
|
CVE-2025-48254 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Change Add to Cart Button Text for WooCommerce allows Stored XSS. This issue affects Change Add to Cart Button Text for WooCommerce: from n/a through 2.2.2.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
May 19th, 2025 (22 days ago)
|
|
CVE-2025-48253 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Free Shipping Bar: Amount Left for Free Shipping for WooCommerce allows Stored XSS. This issue affects Free Shipping Bar: Amount Left for Free Shipping for WooCommerce: from n/a through 2.4.6.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
May 19th, 2025 (22 days ago)
|
|
CVE-2025-48252 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Back Button Widget allows Stored XSS. This issue affects Back Button Widget: from n/a through 1.6.8.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
May 19th, 2025 (22 days ago)
|
|
CVE-2025-48251 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Additional Custom Emails & Recipients for WooCommerce allows Stored XSS. This issue affects Additional Custom Emails & Recipients for WooCommerce: from n/a through 3.5.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
May 19th, 2025 (22 days ago)
|
|
CVE-2025-48250 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Coupons & Add to Cart by URL Links for WooCommerce allows Stored XSS. This issue affects Coupons & Add to Cart by URL Links for WooCommerce: from n/a through 1.7.7.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
May 19th, 2025 (22 days ago)
|
|
CVE-2025-48249 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory EAN for WooCommerce allows Stored XSS. This issue affects EAN for WooCommerce: from n/a through 5.4.6.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
May 19th, 2025 (22 days ago)
|
|
CVE-2025-48248 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Sitewide Discount for WooCommerce: Apply Discount to All Products allows Stored XSS. This issue affects Sitewide Discount for WooCommerce: Apply Discount to All Products: from n/a through 2.2.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
May 19th, 2025 (22 days ago)
|