NotFound vulnerabilities and threats

21 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.6	EPSS 0.2%	CVE-2025-30967WPJobBoard (WordPress plugin) · Cross-Site Request Forgery (CSRF) Critical9.6EPSS 0.2%2025-04-15CVE Database V5CVE-2025-30967 Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Upload a Web Shell to a Web Server. This issue affects WPJobBoard: from n/a through n/a. EPSS 0.2%Vulnerability NotFound CWE-352	CVE Database V5	2025-04-15
Medium	5.4	EPSS 0.3%	CVE-2025-30966WPJobBoard (WordPress plugin) · Path Traversal Medium5.4EPSS 0.3%2025-04-15CVE Database V5CVE-2025-30966 Path Traversal vulnerability in NotFound WPJobBoard allows Path Traversal. This issue affects WPJobBoard: from n/a through n/a. EPSS 0.3%Vulnerability NotFound CWE-35	CVE Database V5	2025-04-15
High	7.5	EPSS 0.5%	CVE-2025-27008Unlimited Timeline (WordPress plugin) · Missing Authorization High7.5EPSS 0.5%2025-04-15CVE Database V5CVE-2025-27008 Missing Authorization vulnerability in NotFound Unlimited Timeline unlimited-timeline allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Unlimited Timeline: from n/a through < 1.6.1. EPSS 0.5%Vulnerability NotFound	CVE Database V5	2025-04-15
High	7.5	EPSS 0.5%	CVE-2025-26730Macro Calculator with Admin Email Optin & Data (WordPress plugin) · Exposure of Sensitive System Information to an Unauthorized Control Sphere High7.5EPSS 0.5%2025-04-15CVE Database V5CVE-2025-26730 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NotFound Macro Calculator with Admin Email Optin & Data. This issue affects Macro Calculator with Admin Email Optin & Data: from n/a through 1.0. EPSS 0.5%Vulnerability NotFound CWE-497	CVE Database V5	2025-04-15
High	7.1	EPSS 0.3%	CVE-2025-22263Global Gallery (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-04-15CVE Database V5CVE-2025-22263 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Global Gallery allows Reflected XSS. This issue affects Global Gallery: from n/a through 8.8.0. EPSS 0.3%Vulnerability NotFound CWE-79	CVE Database V5	2025-04-15
Medium	4.3	EPSS 0.2%	CVE-2025-30965WPJobBoard (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-04-15CVE Database V5CVE-2025-30965 Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Cross Site Request Forgery. This issue affects WPJobBoard: from n/a through n/a. EPSS 0.2%Vulnerability NotFound CWE-352	CVE Database V5	2025-04-15
Medium	6.5	EPSS 0.3%	CVE-2025-31409Bridge Core (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2025-04-01CVE Database V5CVE-2025-31409 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Bridge Core allows Stored XSS. This issue affects Bridge Core: from n/a through n/a. EPSS 0.3%Vulnerability NotFound CWE-79	CVE Database V5	2025-04-01
High	7.1	EPSS 0.2%	CVE-2025-26972PrivateContent (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-03-15CVE Database V5CVE-2025-26972 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound PrivateContent. This issue affects PrivateContent: from n/a through 8.11.5. EPSS 0.2%Vulnerability NotFound CWE-79	CVE Database V5	2025-03-15
Medium	6.3	EPSS 0.4%	CVE-2025-26940Pie Register Premium (WordPress plugin) · Path Traversal Medium6.3EPSS 0.4%2025-03-15CVE Database V5CVE-2025-26940 Path Traversal vulnerability in NotFound Pie Register Premium. This issue affects Pie Register Premium: from n/a through 3.8.3.2. EPSS 0.4%Vulnerability NotFound CWE-35	CVE Database V5	2025-03-15
High	7.1	EPSS 0.3%	CVE-2025-25129Callback Request (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-03-03CVE Database V5CVE-2025-25129 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Callback Request allows Reflected XSS. This issue affects Callback Request: from n/a through 1.4. EPSS 0.3%Vulnerability NotFound CWE-79	CVE Database V5	2025-03-03
Medium	4.3	EPSS 0.3%	CVE-2025-26948Pie Register Premium (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.3%2025-02-25CVE Database V5CVE-2025-26948 Missing Authorization vulnerability in NotFound Pie Register Premium. This issue affects Pie Register Premium: from n/a through 3.8.3.2. EPSS 0.3%Vulnerability NotFound CWE-862	CVE Database V5	2025-02-25
Critical	10.0	EPSS 0.6%	CVE-2025-26776Chaty Pro (WordPress plugin) · Unrestricted File Upload Critical10.0EPSS 0.6%2025-02-22CVE Database V5CVE-2025-26776 Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Chaty Pro allows Upload a Web Shell to a Web Server. This issue affects Chaty Pro: from n/a through 3.3.3. EPSS 0.6%Vulnerability NotFound CWE-434	CVE Database V5	2025-02-22
High	7.1	EPSS 0.2%	CVE-2025-22680Ad Inserter Pro (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-02-16CVE Database V5CVE-2025-22680 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Ad Inserter Pro allows Reflected XSS. This issue affects Ad Inserter Pro: from n/a through 2.7.39. EPSS 0.2%Vulnerability NotFound CWE-79	CVE Database V5	2025-02-16
High	7.5	EPSS 0.4%	CVE-2024-43333Admin and Site Enhancements (ASE) Pro (WordPress plugin) · Incorrect Privilege Assignment High7.5EPSS 0.4%2025-02-03CVE Database V5CVE-2024-43333 Incorrect Privilege Assignment vulnerability in NotFound Admin and Site Enhancements (ASE) Pro allows Privilege Escalation. This issue affects Admin and Site Enhancements (ASE) Pro: from n/a through 7.6.2.1. EPSS 0.4%Vulnerability NotFound CWE-266	CVE Database V5	2025-02-03
High	7.1	EPSS 0.3%	CVE-2025-24781WPJobBoard (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-02-03CVE Database V5CVE-2025-24781 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WPJobBoard allows Reflected XSS. This issue affects WPJobBoard: from n/a through 5.10.1. EPSS 0.3%Vulnerability NotFound CWE-79	CVE Database V5	2025-02-03
Medium	4.3	EPSS 0.2%	CVE-2025-24744Bridge Core (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2025-01-27CVE Database V5CVE-2025-24744 Missing Authorization vulnerability in NotFound Bridge Core. This issue affects Bridge Core: from n/a through 3.3. EPSS 0.2%Vulnerability NotFound CWE-862	CVE Database V5	2025-01-27
Medium	4.3	EPSS 0.2%	CVE-2025-24653Admin and Site Enhancements (ASE) Pro (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2025-01-27CVE Database V5CVE-2025-24653 Missing Authorization vulnerability in NotFound Admin and Site Enhancements (ASE) Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Admin and Site Enhancements (ASE) Pro: from n/a through 7.6.1.1. EPSS 0.2%Vulnerability NotFound CWE-862	CVE Database V5	2025-01-27
High	7.1	EPSS 0.2%	CVE-2025-22763Brizy Pro (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-01-21CVE Database V5CVE-2025-22763 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Brizy Pro allows Reflected XSS. This issue affects Brizy Pro: from n/a through 2.6.1. EPSS 0.2%Vulnerability NotFound CWE-79	CVE Database V5	2025-01-21
High	8.5	EPSS 0.4%	CVE-2024-49333Hero Mega Menu (WordPress plugin) · SQL Injection High8.5EPSS 0.4%2025-01-21CVE Database V5CVE-2024-49333 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n/a through 1.16.5. EPSS 0.4%Vulnerability NotFound CWE-89	CVE Database V5	2025-01-21
High	8.5	EPSS 0.4%	CVE-2024-49303Hero Mega Menu (WordPress plugin) · SQL Injection High8.5EPSS 0.4%2025-01-21CVE Database V5CVE-2024-49303 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n/a through 1.16.5. EPSS 0.4%Vulnerability NotFound CWE-89	CVE Database V5	2025-01-21

Page 1 of 2