CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-47567	WordPress Video Player & FullScreen Video Background plugin <= 2.4.1 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Video Player & FullScreen Video Background allows Blind SQL Injection. This issue affects Video Player & FullScreen Video Background: from n/a through 2.4.1. CVSS: HIGH (7.6) EPSS Score: 0.04% Source: CVE May 16th, 2025 (27 days ago)
CVE-2025-47564	WordPress EventON plugin <= 4.9.9 - Broken Access Control vulnerability Description: Missing Authorization vulnerability in ashanjay EventON allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects EventON: from n/a through 4.9.9. CVSS: MEDIUM (5.3) EPSS Score: 0.05% Source: CVE May 16th, 2025 (27 days ago)
CVE-2025-47563	WordPress CURCY plugin <= 2.3.7 - Arbitrary Shortcode Execution vulnerability Description: Missing Authorization vulnerability in villatheme CURCY allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects CURCY: from n/a through 2.3.7. CVSS: MEDIUM (5.3) EPSS Score: 0.04% Source: CVE May 16th, 2025 (27 days ago)
CVE-2025-47562	WordPress MapSVG <= 8.5.34 - Content Injection Vulnerability Description: Improper Control of Generation of Code ('Code Injection') vulnerability in RomanCode MapSVG allows Code Injection. This issue affects MapSVG: from n/a through 8.5.34. CVSS: MEDIUM (5.3) EPSS Score: 0.05% Source: CVE May 16th, 2025 (27 days ago)
CVE-2025-47560	WordPress MapSVG plugin <= 8.5.32 - Broken Access Control Vulnerability Description: Missing Authorization vulnerability in RomanCode MapSVG allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MapSVG: from n/a through 8.5.32. CVSS: MEDIUM (5.0) EPSS Score: 0.03% Source: CVE May 16th, 2025 (27 days ago)
CVE-2025-47557	WordPress MapSVG plugin <= 8.5.31 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG allows Stored XSS. This issue affects MapSVG: from n/a through 8.5.31. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE May 16th, 2025 (27 days ago)
CVE-2025-47556	WordPress CSS3 Compare Pricing Tables for WordPress <= 11.5 - Broken Access Control Vulnerability Description: Missing Authorization vulnerability in QuanticaLabs CSS3 Compare Pricing Tables for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CSS3 Compare Pricing Tables for WordPress: from n/a through 11.5. CVSS: MEDIUM (5.4) EPSS Score: 0.04% Source: CVE May 16th, 2025 (27 days ago)
CVE-2025-47534	WordPress Wordpress Auto Spinner <= 3.25.0 - Broken Access Control Vulnerability Description: Missing Authorization vulnerability in ValvePress Wordpress Auto Spinner allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Wordpress Auto Spinner: from n/a through 3.25.0. CVSS: MEDIUM (4.3) EPSS Score: 0.03% Source: CVE May 16th, 2025 (27 days ago)
CVE-2025-46464	WordPress Ads Pro plugin <= 4.88 - Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in scripteo Ads Pro Plugin allows Stored XSS. This issue affects Ads Pro Plugin: from n/a through 4.88. CVSS: MEDIUM (6.5) EPSS Score: 0.03% Source: CVE May 16th, 2025 (27 days ago)
CVE-2025-39537	WordPress WP JobHunt <= 7.1 - Insecure Direct Object References (IDOR) Vulnerability Description: Authorization Bypass Through User-Controlled Key vulnerability in Chimpstudio WP JobHunt allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP JobHunt: from n/a through 7.1. CVSS: MEDIUM (5.3) EPSS Score: 0.04% Source: CVE May 16th, 2025 (27 days ago)