[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 424268
> CVE-2025-23713 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.19%]
Cross-Site Request Forgery (CSRF) vulnerability in Artem Anikeev Hack me if you can allows Stored XSS.This issue affects Hack me if you can: from n/a through 1.2.
> CVE-2025-23712 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.18%]
Cross-Site Request Forgery (CSRF) vulnerability in Kapost Kapost allows Stored XSS.This issue affects Kapost: from n/a through 2.2.9.
> CVE-2025-23710 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.18%]
Cross-Site Request Forgery (CSRF) vulnerability in Mayur Sojitra Flying Twitter Birds allows Stored XSS.This issue affects Flying Twitter Birds: from n/a through 1.8.
> CVE-2025-23708 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.18%]
Cross-Site Request Forgery (CSRF) vulnerability in Dominic Fallows DF Draggable allows Stored XSS.This issue affects DF Draggable: from n/a through 1.13.2.
> CVE-2025-23703 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.18%]
Cross-Site Request Forgery (CSRF) vulnerability in CS : ABS-Hosting.nl / Walchum.net Free MailClient FMC allows Stored XSS.This issue affects Free MailClient FMC: from n/a through 1.0.
> CVE-2025-23702 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.18%]
Cross-Site Request Forgery (CSRF) vulnerability in Schalk Burger Anonymize Links allows Stored XSS.This issue affects Anonymize Links: from n/a through 1.1.
> CVE-2025-23699 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.33%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TechMix Event Countdown Timer Plugin by TechMix allows Reflected XSS.This issue affects Event Countdown Timer Plugin by TechMix: from n/a through 1.4.
> CVE-2025-23698 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.18%]
Cross-Site Request Forgery (CSRF) vulnerability in Iván R. Delgado Martínez WP Custom Google Search allows Stored XSS.This issue affects WP Custom Google Search: from n/a through 1.0.
> CVE-2025-23694 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.18%]
Cross-Site Request Forgery (CSRF) vulnerability in Shabbos Commerce Shabbos and Yom Tov allows Stored XSS.This issue affects Shabbos and Yom Tov: from n/a through 1.9.
> CVE-2025-23693 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.18%]
Cross-Site Request Forgery (CSRF) vulnerability in Stanisław Skonieczny Secure CAPTCHA allows Stored XSS.This issue affects Secure CAPTCHA: from n/a through 1.2.
> CVE-2025-23692 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.18%]
Cross-Site Request Forgery (CSRF) vulnerability in Artem Anikeev Slider for Writers allows Stored XSS.This issue affects Slider for Writers: from n/a through 1.3.
> CVE-2025-23691 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.18%]
Cross-Site Request Forgery (CSRF) vulnerability in Braulio Aquino García Send to Twitter allows Stored XSS.This issue affects Send to Twitter: from n/a through 1.7.2.
> CVE-2025-23690 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.18%]
Cross-Site Request Forgery (CSRF) vulnerability in ArtkanMedia Book a Place allows Stored XSS.This issue affects Book a Place: from n/a through 0.7.1.
> CVE-2025-23689 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.33%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Poco Blogger Image Import allows Stored XSS.This issue affects Blogger Image Import: from 2.1 through n/a.
> CVE-2025-23677 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.18%]
Cross-Site Request Forgery (CSRF) vulnerability in DSmidgy HTTP to HTTPS link changer by Eyga.net allows Stored XSS.This issue affects HTTP to HTTPS link changer by Eyga.net: from n/a through 0.2.4.
> CVE-2025-23675 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.18%]
Cross-Site Request Forgery (CSRF) vulnerability in SandyIN Import Users to MailChimp allows Stored XSS.This issue affects Import Users to MailChimp: from n/a through 1.0.
> CVE-2025-23673 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.18%]
Cross-Site Request Forgery (CSRF) vulnerability in Don Kukral Email on Publish allows Stored XSS.This issue affects Email on Publish: from n/a through 1.5.
> CVE-2025-23665 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.20%]
Cross-Site Request Forgery (CSRF) vulnerability in Rapid Sort RSV GMaps allows Stored XSS.This issue affects RSV GMaps: from n/a through 1.5.
> CVE-2025-23664 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.20%]
Cross-Site Request Forgery (CSRF) vulnerability in Real Seguro Viagem Real Seguro Viagem allows Stored XSS.This issue affects Real Seguro Viagem: from n/a through 2.0.5.
> CVE-2025-23662 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.20%]
Cross-Site Request Forgery (CSRF) vulnerability in Ryan Sutana WP Panoramio allows Stored XSS.This issue affects WP Panoramio: from n/a through 1.5.0.
> CVE-2025-23661 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.20%]
Cross-Site Request Forgery (CSRF) vulnerability in Ryan Sutana NV Slider allows Stored XSS.This issue affects NV Slider: from n/a through 1.6.
> CVE-2025-23660 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.20%]
Cross-Site Request Forgery (CSRF) vulnerability in Walter Cerrudo MFPlugin allows Stored XSS.This issue affects MFPlugin: from n/a through 1.3.
> CVE-2025-23659 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.20%]
Cross-Site Request Forgery (CSRF) vulnerability in Hernan Javier Hegykozi MercadoLibre Integration allows Stored XSS.This issue affects MercadoLibre Integration: from n/a through 1.1.
> CVE-2025-23654 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.20%]
Cross-Site Request Forgery (CSRF) vulnerability in Vinícius Krolow Twitter Post allows Stored XSS.This issue affects Twitter Post: from n/a through 0.1.
> CVE-2025-23649 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.20%]
Cross-Site Request Forgery (CSRF) vulnerability in Kreg Steppe Auphonic Importer allows Stored XSS.This issue affects Auphonic Importer: from n/a through 1.5.1.
> CVE-2025-23644 [MEDIUM 6.5]
[PUBLISHED: 2025-01-16] [EPSS 0.27%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Kuepper QuoteMedia Tools allows DOM-Based XSS.This issue affects QuoteMedia Tools: from n/a through 1.0.
> CVE-2025-23642 [MEDIUM 6.5]
[PUBLISHED: 2025-01-16] [EPSS 0.36%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pflonk Sidebar-Content from Shortcode allows DOM-Based XSS.This issue affects Sidebar-Content from Shortcode: from n/a through 2.0.
> CVE-2025-23641 [MEDIUM 6.5]
[PUBLISHED: 2025-01-16] [EPSS 0.36%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Thomas Ehrhardt Powie's pLinks PagePeeker allows DOM-Based XSS.This issue affects Powie's pLinks PagePeeker: from n/a through 1.0.2.
> CVE-2025-23640 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.17%]
Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan Rename Author Slug allows Stored XSS.This issue affects Rename Author Slug: from n/a through 1.2.0.
> CVE-2025-23639 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.17%]
Cross-Site Request Forgery (CSRF) vulnerability in Nazmul Ahsan MDC YouTube Downloader allows Stored XSS.This issue affects MDC YouTube Downloader: from n/a through 3.0.0.
AFFECTED_PRODUCTS: Mdc Youtube Downloader Project Mdc Youtube Downloader
> CVE-2025-23627 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.17%]
Cross-Site Request Forgery (CSRF) vulnerability in Gordon French Comment-Emailer allows Stored XSS.This issue affects Comment-Emailer: from n/a through 1.0.5.
> CVE-2025-23623 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.33%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mahesh Bisen Contact Form 7 – CCAvenue Add-on allows Reflected XSS.This issue affects Contact Form 7 – CCAvenue Add-on: from n/a through 1.0.
> CVE-2025-23620 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.33%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alexey Trofimov Captchelfie – Captcha by Selfie allows Reflected XSS.This issue affects Captchelfie – Captcha by Selfie: from n/a through 1.0.7.
> CVE-2025-23618 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.20%]
Cross-Site Request Forgery (CSRF) vulnerability in Andrea Brandi Twitter Shortcode allows Stored XSS.This issue affects Twitter Shortcode: from n/a through 0.9.
> CVE-2025-23617 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.17%]
Cross-Site Request Forgery (CSRF) vulnerability in Oliver Schaal Floatbox Plus allows Stored XSS.This issue affects Floatbox Plus: from n/a through 1.4.4.
> CVE-2025-23577 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.20%]
Cross-Site Request Forgery (CSRF) vulnerability in Sourov Amin Word Freshener allows Stored XSS.This issue affects Word Freshener: from n/a through 1.3.
> CVE-2025-23573 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.20%]
Cross-Site Request Forgery (CSRF) vulnerability in Sam Burdge WP Background Tile allows Stored XSS.This issue affects WP Background Tile: from n/a through 1.0.
> CVE-2025-23572 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.20%]
Cross-Site Request Forgery (CSRF) vulnerability in Dave Konopka, Martin Scharm UpDownUpDown allows Stored XSS.This issue affects UpDownUpDown: from n/a through 1.1.
> CVE-2025-23569 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.20%]
Cross-Site Request Forgery (CSRF) vulnerability in Kelvin Ng Shortcode in Comment allows Stored XSS.This issue affects Shortcode in Comment: from n/a through 1.1.1.
> CVE-2025-23567 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.20%]
Cross-Site Request Forgery (CSRF) vulnerability in Intuitive Design GDReseller allows Stored XSS.This issue affects GDReseller: from n/a through 1.6.
> CVE-2025-23566 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.20%]
Cross-Site Request Forgery (CSRF) vulnerability in Syed Amir Hussain Custom Post allows Stored XSS.This issue affects Custom Post: from n/a through 1.0.
> CVE-2025-23560 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.21%]
Cross-Site Request Forgery (CSRF) vulnerability in Elke Hinze, Plumeria Web Design Web Testimonials allows Stored XSS.This issue affects Web Testimonials: from n/a through 1.2.
> CVE-2025-23559 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.21%]
Cross-Site Request Forgery (CSRF) vulnerability in Stepan Stepasyuk MemeOne allows Stored XSS.This issue affects MemeOne: from n/a through 2.0.5.
> CVE-2025-23558 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.21%]
Cross-Site Request Forgery (CSRF) vulnerability in digfish Geotagged Media allows Stored XSS.This issue affects Geotagged Media: from n/a through 0.3.0.
> CVE-2025-23557 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.21%]
Cross-Site Request Forgery (CSRF) vulnerability in Kathleen Malone Find Your Reps allows Stored XSS.This issue affects Find Your Reps: from n/a through 1.2.
> CVE-2025-23547 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.43%]
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Peter Shaw LH Login Page allows Reflected XSS.This issue affects LH Login Page: from n/a through 2.14.
> CVE-2025-23537 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.21%]
Cross-Site Request Forgery (CSRF) vulnerability in Oren hahiashvili add custom google tag manager allows Stored XSS.This issue affects add custom google tag manager: from n/a through 1.0.3.
> CVE-2025-23533 [HIGH 7.1]
[PUBLISHED: 2025-01-16] [EPSS 0.21%]
Cross-Site Request Forgery (CSRF) vulnerability in Adrian Moreno WP Lyrics allows Stored XSS.This issue affects WP Lyrics: from n/a through 0.4.1.
> CVE-2025-23532 [HIGH 8.8]
[PUBLISHED: 2025-01-16] [EPSS 0.29%]
Cross-Site Request Forgery (CSRF) vulnerability in Regios MyAnime Widget allows Privilege Escalation.This issue affects MyAnime Widget: from n/a through 1.0.
> CVE-2025-23530 [HIGH 8.8]
[PUBLISHED: 2025-01-16] [EPSS 0.29%]
Cross-Site Request Forgery (CSRF) vulnerability in Yonatan Reinberg of Social Ink Custom Post Type Lockdown allows Privilege Escalation.This issue affects Custom Post Type Lockdown: from n/a through 1.11.