Threat database

5 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.3%	CVE-2025-68834Sync Master Sheet (WordPress plugin) · Missing Authorization High7.5EPSS 0.3%2026-02-20CVE Database V5CVE-2025-68834 Missing Authorization vulnerability in Saiful Islam Sync Master Sheet – Product Sync with Google Sheet for WooCommerce product-sync-master-sheet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sync Master Sheet – Product Sync with Google Sheet for WooCommerce: from n/a through <= 1.1.3. EPSS 0.3%Vulnerability Saiful Islam	CVE Database V5	2026-02-20
Medium	4.3	EPSS 0.2%	CVE-2025-32264UltraAddons Elementor Lite (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-04-04CVE Database V5CVE-2025-32264 Cross-Site Request Forgery (CSRF) vulnerability in Saiful Islam UltraAddons Elementor Lite ultraaddons-elementor-lite allows Cross Site Request Forgery.This issue affects UltraAddons Elementor Lite: from n/a through <= 2.0.2. EPSS 0.2%Vulnerability Saiful Islam	CVE Database V5	2025-04-04
High	7.1	EPSS 0.3%	CVE-2025-22307Product Table for WooCommerce (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-01-09CVE Database V5CVE-2025-22307 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiful Islam Product Table for WooCommerce woo-product-table allows Reflected XSS.This issue affects Product Table for WooCommerce: from n/a through <= 4.0.3. EPSS 0.3%Vulnerability Saiful Islam	CVE Database V5	2025-01-09
Medium	6.5	EPSS 0.3%	CVE-2024-49277UltraAddons Elementor Lite (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-10-17CVE Database V5CVE-2024-49277 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiful Islam UltraAddons Elementor Lite ultraaddons-elementor-lite allows Stored XSS.This issue affects UltraAddons Elementor Lite: from n/a through <= 2.0.2. EPSS 0.3%Vulnerability Saiful Islam	CVE Database V5	2024-10-17
Medium	6.5	EPSS 0.2%	CVE-2024-37554UltraAddons Elementor Lite (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2024-07-06CVE Database V5CVE-2024-37554 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiful Islam UltraAddons Elementor Lite ultraaddons-elementor-lite allows DOM-Based XSS.This issue affects UltraAddons Elementor Lite: from n/a through <= 2.0.2. EPSS 0.2%Vulnerability Saiful Islam	CVE Database V5	2024-07-06

Page 1 of 1