Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.3%	CVE-2025-14397Postem Ipsum · Missing Authorization High8.8EPSS 0.3%2025-12-13CVE Database V5CVE-2025-14397 The Postem Ipsum plugin for WordPress is vulnerable to unauthorized modification of data to Privilege Escalation due to a missing capability check on the postem_ipsum_generate_users() function in all versions up to, and including, 3.0.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create arbitrary user accounts with the administrator role. EPSS 0.3%Vulnerability franciscopalacios #cwe-862	CVE Database V5	2025-12-13
High	7.1	EPSS 0.4%	CVE-2025-23732Easy Filtering · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in… High7.1EPSS 0.4%2025-01-22CVE Database V5CVE-2025-23732 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in franciscopalacios Easy Filtering easy-filtering allows Reflected XSS.This issue affects Easy Filtering: from n/a through <= 2.5.0. EPSS 0.4%Vulnerability franciscopalacios	CVE Database V5	2025-01-22

Showing 1–2 of 2 results