Threat database

51 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.4%	CVE-2025-49417WooCommerce Product Multi-Action · Deserialization of Untrusted Data Critical9.8EPSS 0.4%2025-07-04CVE Database V5CVE-2025-49417 Deserialization of Untrusted Data vulnerability in BestWpDeveloper WooCommerce Product Multi-Action Woo-product-multiaction allows Object Injection.This issue affects WooCommerce Product Multi-Action: from n/a through <= 1.3. EPSS 0.4%Vulnerability BestWpDeveloper	CVE Database V5	2025-07-04
High	7.1	EPSS 1.2%	CVE-2025-24752Essential Addons for Elementor · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WPDeveloper… High7.1EPSS 1.2%2025-04-17CVE Database V5CVE-2025-24752 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Reflected XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.0.14. EPSS 1.2%Vulnerability WPDeveloper	CVE Database V5	2025-04-17
Medium	4.3	EPSS 0.4%	CVE-2025-39589Essential Addons for Elementor · Exposure of Sensitive System Information to an Unauthorized Control Sphere in WPDeveloper Essential… Medium4.3EPSS 0.4%2025-04-16CVE Database V5CVE-2025-39589 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Retrieve Embedded Sensitive Data.This issue affects Essential Addons for Elementor: from n/a through <= 6.1.9. EPSS 0.4%Vulnerability WPDeveloper	CVE Database V5	2025-04-16
Medium	6.5	EPSS 0.3%	CVE-2025-39590Essential Addons for Elementor · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WPDeveloper… Medium6.5EPSS 0.3%2025-04-16CVE Database V5CVE-2025-39590 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.1.9. EPSS 0.3%Vulnerability WPDeveloper	CVE Database V5	2025-04-16
High	7.1	EPSS 0.1%	CVE-2025-25086Secret Meta · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.1%2025-03-27CVE Database V5CVE-2025-25086 Cross-Site Request Forgery (CSRF) vulnerability in WPDeveloper Secret Meta facebook-secret-meta allows Reflected XSS.This issue affects Secret Meta: from n/a through <= 1.2.1. EPSS 0.1%Vulnerability WPDeveloper	CVE Database V5	2025-03-27
Medium	4.3	EPSS 0.4%	CVE-2025-26871Essential Blocks for Gutenberg · Missing Authorization Medium4.3EPSS 0.4%2025-02-25CVE Database V5CVE-2025-26871 Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.8.3. EPSS 0.4%Vulnerability WPDeveloper	CVE Database V5	2025-02-25
Medium	5.4	EPSS 0.3%	CVE-2025-22696Document Block – Upload & Embed Docs · Missing Authorization Medium5.4EPSS 0.3%2025-02-04CVE Database V5CVE-2025-22696 Missing Authorization vulnerability in WPDeveloper Document Block – Upload & Embed Docs document.This issue affects Document Block – Upload & Embed Docs: from n/a through <= 1.1.0. EPSS 0.3%Vulnerability WPDeveloper	CVE Database V5	2025-02-04
Medium	6.5	EPSS 0.3%	CVE-2025-22683NotificationX · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WPDeveloper… Medium6.5EPSS 0.3%2025-02-03CVE Database V5CVE-2025-22683 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper NotificationX notificationx allows Stored XSS.This issue affects NotificationX: from n/a through <= 2.9.5. EPSS 0.3%Vulnerability WPDeveloper	CVE Database V5	2025-02-03
Medium	4.3	EPSS 0.4%	CVE-2024-12532BWD Elementor Addons · Exposure of Sensitive Information to an Unauthorized Actor Medium4.3EPSS 0.4%2025-01-07CVE Database V5CVE-2024-12532 The BWD Elementor Addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.18 in widgets/bwdeb-content-switcher.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data. EPSS 0.4%Vulnerability bestwpdeveloper #cwe-200	CVE Database V5	2025-01-07
Medium	6.5	EPSS 0.3%	CVE-2025-22315Typing Text · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WPDeveloper… Medium6.5EPSS 0.3%2025-01-07CVE Database V5CVE-2025-22315 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Typing Text typing-text allows Stored XSS.This issue affects Typing Text: from n/a through <= 1.2.7. EPSS 0.3%Vulnerability WPDeveloper	CVE Database V5	2025-01-07
Medium	6.5	EPSS 0.3%	CVE-2024-56063Essential Addons for Elementor · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WPDeveloper… Medium6.5EPSS 0.3%2024-12-31CVE Database V5CVE-2024-56063 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a through <= 6.0.7. EPSS 0.3%Vulnerability WPDeveloper	CVE Database V5	2024-12-31
Medium	6.1	EPSS 0.5%	CVE-2024-12395Additional Fees For WooCommerce Checkout · Cross-site Scripting Medium6.1EPSS 0.5%2024-12-17CVE Database V5CVE-2024-12395 The WooCommerce Additional Fees On Checkout (Free) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘number’ parameter in all versions up to, and including, 1.4.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. EPSS 0.5%Vulnerability amitwpdeveloper #cwe-79	CVE Database V5	2024-12-17
High	7.6	EPSS 0.5%	CVE-2024-51672BetterLinks · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in WPDeveloper… High7.6EPSS 0.5%2024-11-04CVE Database V5CVE-2024-51672 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPDeveloper BetterLinks betterlinks allows SQL Injection.This issue affects BetterLinks: from n/a through <= 2.1.7. EPSS 0.5%Vulnerability WPDeveloper	CVE Database V5	2024-11-04
Medium	6.3	EPSS 0.4%	CVE-2024-38707EmbedPress · Missing Authorization Medium6.3EPSS 0.4%2024-11-01CVE Database V5CVE-2024-38707 Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EmbedPress: from n/a through 4.0.4. EPSS 0.4%Vulnerability WPDeveloper #cwe-862	CVE Database V5	2024-11-01
Medium	6.5	EPSS 1.7%	CVE-2024-47308Templately · Missing Authorization Medium6.5EPSS 1.7%2024-11-01CVE Database V5CVE-2024-47308 Missing Authorization vulnerability in WPDeveloper Templately templately.This issue affects Templately: from n/a through <= 3.1.2. EPSS 1.7%Vulnerability WPDeveloper	CVE Database V5	2024-11-01
Medium	5.4	EPSS 0.4%	CVE-2024-50423Templately · Missing Authorization Medium5.4EPSS 0.4%2024-10-29CVE Database V5CVE-2024-50423 Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templately: from n/a through <= 3.1.5. EPSS 0.4%Vulnerability WPDeveloper	CVE Database V5	2024-10-29
Medium	6.5	EPSS 0.4%	CVE-2024-50424Templately · Missing Authorization Medium6.5EPSS 0.4%2024-10-29CVE Database V5CVE-2024-50424 Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templately: from n/a through <= 3.1.5. EPSS 0.4%Vulnerability WPDeveloper	CVE Database V5	2024-10-29
Medium	6.5	EPSS 0.3%	CVE-2024-50461EmbedPress · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WPDeveloper… Medium6.5EPSS 0.3%2024-10-28CVE Database V5CVE-2024-50461 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper EmbedPress embedpress allows Stored XSS.This issue affects EmbedPress: from n/a through <= 4.0.14. EPSS 0.3%Vulnerability WPDeveloper	CVE Database V5	2024-10-28
Medium	6.5	EPSS 0.3%	CVE-2024-47385Essential Blocks for Gutenberg · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WPDeveloper… Medium6.5EPSS 0.3%2024-10-05CVE Database V5CVE-2024-47385 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Stored XSS.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.8.4. EPSS 0.3%Vulnerability WPDeveloper	CVE Database V5	2024-10-05
Medium	6.5	EPSS 0.3%	CVE-2024-43936EmbedPress · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Medium6.5EPSS 0.3%2024-08-29CVE Database V5CVE-2024-43936 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects EmbedPress: from n/a through 4.0.8. EPSS 0.3%Vulnerability WPDeveloper #cwe-79	CVE Database V5	2024-08-29

Showing 21–40 of 51 results