CVE & Exploit Intelligence Database

Updated 36m ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

338,223 CVEs tracked 53,274 with exploits 4,730 exploited in wild 1,542 CISA KEV 3,929 Nuclei templates 37,826 vendors 42,563 researchers

8,801 results Clear all

CVE-2025-67471 8.8 HIGH EPSS 0.00

Saad Iqbal Quick Contact Form <= 8.2.5 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Quick Contact Form quick-contact-form allows Cross Site Request Forgery.This issue affects Quick Contact Form: from n/a through <= 8.2.5.

CWE-352 Dec 09, 2025

CVE-2025-67469 8.8 HIGH EPSS 0.00

kubiq PDF Thumbnail Generator - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-generator allows Cross Site Request Forgery.This issue affects PDF Thumbnail Generator: from n/a through <= 1.4.

CWE-352 Dec 09, 2025

CVE-2025-67467 4.5 MEDIUM EPSS 0.00

StellarWP GiveWP <4.13.2 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in StellarWP GiveWP give allows Cross Site Request Forgery.This issue affects GiveWP: from n/a through <= 4.13.1.

CWE-352 Dec 09, 2025

CVE-2025-67465 8.8 HIGH EPSS 0.00

QuantumCloud Simple Link Directory <= 8.8.3 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud Simple Link Directory simple-link-directory allows Cross Site Request Forgery.This issue affects Simple Link Directory: from n/a through <= 8.8.3.

CWE-352 Dec 09, 2025

CVE-2025-66531 8.8 HIGH EPSS 0.00

Salon booking system <10.30.3 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross Site Request Forgery.This issue affects Salon booking system: from n/a through <= 10.30.3.

CWE-352 Dec 09, 2025

CVE-2025-66529 8.8 HIGH EPSS 0.00

Ays Pro Chartify <3.6.3 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Chartify chart-builder allows Cross Site Request Forgery.This issue affects Chartify: from n/a through <= 3.6.3.

CWE-352 Dec 09, 2025

CVE-2025-64256 8.8 HIGH EPSS 0.00

PressTigers Simple Folio <=1.1.0 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in PressTigers Simple Folio simple-folio allows Cross Site Request Forgery.This issue affects Simple Folio: from n/a through <= 1.1.0.

CWE-352 Dec 09, 2025

CVE-2025-63060 4.3 MEDIUM EPSS 0.00

hogash Kallyas <4.2 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n/a through <= 4.2.

CWE-352 Dec 09, 2025

CVE-2025-63030 7.1 HIGH EPSS 0.00

Saad Iqbal New User Approve <= 3.2.0 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal New User Approve new-user-approve allows Cross Site Request Forgery.This issue affects New User Approve: from n/a through <= 3.2.0.

CWE-352 Dec 09, 2025

CVE-2025-63012 4.3 MEDIUM EPSS 0.00

ThimPress WP Hotel Booking - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows Cross Site Request Forgery.This issue affects WP Hotel Booking: from n/a through <= 2.2.7.

CWE-352 Dec 09, 2025

CVE-2025-62873 4.3 MEDIUM EPSS 0.00

WP Flashy Marketing Automation <2.0.9 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in Flashyapp WP Flashy Marketing Automation wp-flashy-marketing-automation allows Cross Site Request Forgery.This issue affects WP Flashy Marketing Automation: from n/a through <= 2.0.8.

CWE-352 Dec 09, 2025

CVE-2025-62872 4.3 MEDIUM EPSS 0.00

JK Social Photo Fetcher <= 3.0.4 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in JK Social Photo Fetcher facebook-photo-fetcher allows Cross Site Request Forgery.This issue affects Social Photo Fetcher: from n/a through <= 3.0.4.

CWE-352 Dec 09, 2025

CVE-2025-62871 4.3 MEDIUM EPSS 0.00

Just TinyMCE Custom Styles <= 1.2.1 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in Alex Prokopenko / JustCoded Just TinyMCE Custom Styles just-tinymce-styles allows Cross Site Request Forgery.This issue affects Just TinyMCE Custom Styles: from n/a through <= 1.2.1.

CWE-352 Dec 09, 2025

CVE-2025-62866 4.3 MEDIUM EPSS 0.00

Valerio Monti Auto Alt Text <= 2.5.2 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in Valerio Monti Auto Alt Text auto-alt-text allows Cross Site Request Forgery.This issue affects Auto Alt Text: from n/a through <= 2.5.2.

CWE-352 Dec 09, 2025

CVE-2025-62762 4.3 MEDIUM EPSS 0.00

photoboxone SMTP Mail <1.3.47 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in photoboxone SMTP Mail smtp-mail allows Cross Site Request Forgery.This issue affects SMTP Mail: from n/a through <= 1.3.47.

CWE-352 Dec 09, 2025

CVE-2025-62739 8.8 HIGH EPSS 0.00

SaifuMak Add Custom Codes <= 4.80 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Cross Site Request Forgery.This issue affects Add Custom Codes: from n/a through <= 4.80.

CWE-352 Dec 09, 2025

CVE-2025-62734 4.3 MEDIUM EPSS 0.00

Media Library Downloader - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in Michael Revellin-Clerc Media Library Downloader media-library-downloader allows Cross Site Request Forgery.This issue affects Media Library Downloader: from n/a through <= 1.4.0.

CWE-352 Dec 09, 2025

CVE-2025-62733 4.3 MEDIUM EPSS 0.00

ProteusThemes Custom Sidebars - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in ProteusThemes Custom Sidebars by ProteusThemes custom-sidebars-by-proteusthemes allows Cross Site Request Forgery.This issue affects Custom Sidebars by ProteusThemes: from n/a through <= 1.0.3.

CWE-352 Dec 09, 2025

CVE-2025-62103 4.3 MEDIUM EPSS 0.00

Media Library File Download <2 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in wpmediadownload Media Library File Download media-download allows Cross Site Request Forgery.This issue affects Media Library File Download: from n/a through <= 1.4.

CWE-352 Dec 09, 2025

CVE-2025-62102 4.3 MEDIUM EPSS 0.00

apasionados DoFollow Case by Case <= 3.5.1 - CSRF

Cross-Site Request Forgery (CSRF) vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Cross Site Request Forgery.This issue affects DoFollow Case by Case: from n/a through <= 3.5.1.

CWE-352 Dec 09, 2025