Threat database

7 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.3%	CVE-2026-39797GDPR Framework By Data443 · Deserialization of Untrusted Data Critical9.8EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39797 Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions. EPSS 0.3%Vulnerability Data443 Risk Mitigation, Inc.#cwe-502	CVE Database V5	2026-10-06
High	7.1	EPSS 0.1%	CVE-2026-28172Tracking Code Manager · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.1%2026-08-06CVE Database V5CVE-2026-28172 CVE-2026-28172 is a high-severity Cross-Site Request Forgery (CSRF) vulnerability affecting Data443 Risk Mitigation, Inc.'s Tracking Code Manager versions up to and including 2.6.0. The vulnerability allows unauthenticated attackers to perform actions on behalf of a user by exploiting CSRF weaknesses. No official patch or remediation guidance is currently available from the vendor. The vulnerability has a CVSS 3.1 score of 7.1, indicating a significant risk due to its network attack vector and impact on confidentiality, integrity, and availability. EPSS 0.1%Vulnerability Data443 Risk Mitigation, Inc.#cwe-352 #ghsa-m77r-w43m-5w96	CVE Database V5	2026-08-06
Medium	5.9	EPSS 0.4%	CVE-2025-32130Posts Footer Manager · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Data443 Risk… Medium5.9EPSS 0.4%2025-04-04CVE Database V5CVE-2025-32130 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Risk Mitigation, Inc. Posts Footer Manager intelly-posts-footer-manager allows Stored XSS.This issue affects Posts Footer Manager: from n/a through <= 2.2.0. EPSS 0.4%Vulnerability Data443 Risk Mitigation, Inc.	CVE Database V5	2025-04-04
Medium	5.9	EPSS 0.4%	CVE-2025-32129Welcome Bar · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Data443 Risk… Medium5.9EPSS 0.4%2025-04-04CVE Database V5CVE-2025-32129 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Risk Mitigation, Inc. Welcome Bar intelly-welcome-bar allows Stored XSS.This issue affects Welcome Bar: from n/a through <= 2.0.4. EPSS 0.4%Vulnerability Data443 Risk Mitigation, Inc.	CVE Database V5	2025-04-04
Medium	5.9	EPSS 0.3%	CVE-2025-22734Posts Footer Manager · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Data443 Risk… Medium5.9EPSS 0.3%2025-01-15CVE Database V5CVE-2025-22734 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Risk Mitigation, Inc. Posts Footer Manager intelly-posts-footer-manager allows Stored XSS.This issue affects Posts Footer Manager: from n/a through <= 2.1.0. EPSS 0.3%Vulnerability Data443 Risk Mitigation, Inc.	CVE Database V5	2025-01-15
High	7.1	EPSS 0.4%	CVE-2024-52465LGPD Framework · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Data443 Risk… High7.1EPSS 0.4%2024-12-02CVE Database V5CVE-2024-52465 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Risk Mitigation, Inc. LGPD Framework lgpd-framework allows Reflected XSS.This issue affects LGPD Framework: from n/a through <= 2.0.2. EPSS 0.4%Vulnerability Data443 Risk Mitigation, Inc.	CVE Database V5	2024-12-02

Showing 1–7 of 7 results · 1 duplicate CVE record merged