Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-32166 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in John Housholder Emma for WordPress allows Stored XSS. This issue affects Emma for WordPress: from n/a through 1.3.3.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 4th, 2025 (18 days ago)
|
|
CVE-2025-32165 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fromdoppler Doppler Forms allows Stored XSS. This issue affects Doppler Forms: from n/a through 2.4.5.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 4th, 2025 (18 days ago)
|
|
CVE-2025-32163 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS. This issue affects Xpro Elementor Addons: from n/a through 1.4.9.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 4th, 2025 (18 days ago)
|
|
CVE-2025-32162 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Morgan Kay Chamber Dashboard Business Directory allows DOM-Based XSS. This issue affects Chamber Dashboard Business Directory: from n/a through 3.3.11.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 4th, 2025 (18 days ago)
|
|
CVE-2025-32161 |
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryo Arkhe Blocks allows Stored XSS. This issue affects Arkhe Blocks: from n/a through 2.27.1.
CVSS: MEDIUM (6.5) EPSS Score: 0.03%
April 4th, 2025 (18 days ago)
|
|
CVE-2025-32159 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Radius Blocks allows PHP Local File Inclusion. This issue affects Radius Blocks: from n/a through 2.2.1.
CVSS: HIGH (7.5) EPSS Score: 0.13%
April 4th, 2025 (18 days ago)
|
|
CVE-2025-32157 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Jakub Glos Sparkle Elementor Kit allows PHP Local File Inclusion. This issue affects Sparkle Elementor Kit: from n/a through 2.0.9.
CVSS: HIGH (7.5) EPSS Score: 0.13%
April 4th, 2025 (18 days ago)
|
|
CVE-2025-32156 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Alex Prokopenko / JustCoded Just Post Preview Widget allows PHP Local File Inclusion. This issue affects Just Post Preview Widget: from n/a through 1.1.1.
CVSS: HIGH (7.5) EPSS Score: 0.13%
April 4th, 2025 (18 days ago)
|
|
CVE-2025-32155 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in markkinchin Beds24 Online Booking allows PHP Local File Inclusion. This issue affects Beds24 Online Booking: from n/a through 2.0.26.
CVSS: HIGH (7.5) EPSS Score: 0.13%
April 4th, 2025 (18 days ago)
|
|
CVE-2025-32154 |
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Catch Themes Catch Dark Mode allows PHP Local File Inclusion. This issue affects Catch Dark Mode: from n/a through 1.2.1.
CVSS: HIGH (7.5) EPSS Score: 0.13%
April 4th, 2025 (18 days ago)
|