https://db.gcve.eu/sightings/feed 2026-05-11T15:47:57.030018+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/60eec206-31a5-4610-899e-2dd6f3988ac5/export 2026-05-11T15:47:57.195025+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "60eec206-31a5-4610-899e-2dd6f3988ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3814", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12806", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3814\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Tax Switch for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018class-name\u2019 parameter in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-04-22T05:27:24.652Z\n\ud83d\udccf Modified: 2025-04-22T05:27:24.652Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e290f1aa-d20a-4e76-b77b-3e5b79e9d379?source=cve\n2. https://wordpress.org/plugins/tax-switch-for-woocommerce/#developers\n3. https://plugins.trac.wordpress.org/browser/tax-switch-for-woocommerce/tags/1.4.0/includes/class-wdevs-tax-switch-block.php#L112\n4. https://plugins.trac.wordpress.org/changeset/3277044/", "creation_timestamp": "2025-04-22T06:03:21.000000Z"} 2025-04-22T06:03:21+00:00 https://db.gcve.eu/sighting/337d73d7-d3ca-4de3-9f07-44325f3de647/export 2026-05-11T15:47:57.194974+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "337d73d7-d3ca-4de3-9f07-44325f3de647", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3814", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnf4gln2632b", "content": "", "creation_timestamp": "2025-04-22T07:04:39.687845Z"} 2025-04-22T07:04:39.687845+00:00 https://db.gcve.eu/sighting/54129956-de27-41dc-8b5a-97fcc96a0f8b/export 2026-05-11T15:47:57.194915+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "54129956-de27-41dc-8b5a-97fcc96a0f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-3814", "type": "seen", "source": "https://t.me/cvedetector/23484", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-3814 - WooCommerce Tax Switch Stored Cross-Site Scripting\", \n \"Content\": \"CVE ID : CVE-2025-3814 \nPublished : April 22, 2025, 6:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The Tax Switch for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018class-name\u2019 parameter in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"22 Apr 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T10:02:35.000000Z"} 2025-04-22T10:02:35+00:00 https://db.gcve.eu/sighting/ee345bba-8cd7-48b1-bd4d-1dc667933325/export 2026-05-11T15:47:57.194863+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "ee345bba-8cd7-48b1-bd4d-1dc667933325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38142", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114791163687587398", "content": "", "creation_timestamp": "2025-07-03T20:22:33.383058Z"} 2025-07-03T20:22:33.383058+00:00 https://db.gcve.eu/sighting/b3e07d67-d55b-4e27-afe1-7d1a669b404f/export 2026-05-11T15:47:57.194811+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "b3e07d67-d55b-4e27-afe1-7d1a669b404f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38143", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"} 2025-12-03T14:14:49.267740+00:00 https://db.gcve.eu/sighting/dbddc658-043d-4f0a-b462-b752a95c5901/export 2026-05-11T15:47:57.194758+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "dbddc658-043d-4f0a-b462-b752a95c5901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38141", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0290/", "content": "", "creation_timestamp": "2026-03-13T00:00:00.000000Z"} 2026-03-13T00:00:00+00:00 https://db.gcve.eu/sighting/b099b92e-915d-49b8-8512-eec38239d460/export 2026-05-11T15:47:57.194702+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "b099b92e-915d-49b8-8512-eec38239d460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38140", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"} 2026-03-19T00:00:00+00:00 https://db.gcve.eu/sighting/b6f64af5-7571-4786-bbf8-8181e664e766/export 2026-05-11T15:47:57.194634+00:00 sync_user http://db.gcve.eu/user/sync_user {"uuid": "b6f64af5-7571-4786-bbf8-8181e664e766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38141", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhilfgr3vr26", "content": "", "creation_timestamp": "2026-03-20T13:05:28.987550Z"} 2026-03-20T13:05:28.987550+00:00 https://db.gcve.eu/sighting/36fe076a-937b-4ca5-95e9-f3cf1d5404c1/export 2026-05-11T15:47:57.193891+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "36fe076a-937b-4ca5-95e9-f3cf1d5404c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-38141", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0396/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"} 2026-04-02T17:00:00+00:00 https://db.gcve.eu/sighting/48caf240-d739-42fd-a34e-8948c92f8871/export 2026-05-11T15:47:57.191233+00:00 sync_user http://db.gcve.eu/user/sync_user {"uuid": "48caf240-d739-42fd-a34e-8948c92f8871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-38141", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3miltukybcz26", "content": "", "creation_timestamp": "2026-04-03T13:40:17.327599Z"} 2026-04-03T13:40:17.327599+00:00