Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-10020 State: PUBLISHED Published: 2025-10-21T12:12:02.187Z Last Updated: 2025-10-22T11:18:09.933Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Zohocorp Products: ManageEngine ADManager Plus Problem Types: CWE-77 Description: Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability in the Custom Script component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/ad-manager/admanager-kb/cve-2025-10020.html
CVE ID: CVE-2025-10023 State: PUBLISHED Published: 2025-10-27T15:07:21.621Z Last Updated: 2025-10-30T13:48:16.904Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N) Vendors: Centreon Products: Infra Monitoring Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Services Meta-services modules) allows Stored XSS by users with elevated privileges.This issue affects Infra Monitoring: from 24.10.0 before 24.10.9, from 24.04.0 before 24.04.16, from 23.10.0 before 23.10.26. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ce
16, from 23.10.0 before 23.10.26. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/centreon/centreon/releases - https://thewatch.centreon.com/latest-security-bulletins-64/cve-2025-10023-centreon-web-all-versions-medium-severity-5179
CVE ID: CVE-2025-10025 State: PUBLISHED Published: 2025-09-05T19:32:08.273Z Last Updated: 2025-09-05T19:42:09.164Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Course Registration Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/semester.php. The manipulation of the argument semester leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322740 - h
ublic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322740 - https://vuldb.com/?ctiid.322740 - https://vuldb.com/?submit.643916 - https://github.com/zzx-yyds/mycve/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-10026 State: PUBLISHED Published: 2025-09-05T20:02:06.712Z Last Updated: 2025-09-05T20:20:52.131Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: POS Point of Sale System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in itsourcecode POS Point of Sale System 1.0. Affected by this vulnerability is an unknown functionality of the file /inventory/main/vendors/datatables/unit_testing/templates/-complex_header.php. The manipulation of the argument scripts results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. Additional Analyst Note
t is possible to launch the attack remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322741 - https://vuldb.com/?ctiid.322741 - https://vuldb.com/?submit.643941 - https://github.com/AlphabugX/CVE-Report/blob/main/CVE-003.md - https://itsourcecode.com/
CVE ID: CVE-2025-10027 State: PUBLISHED Published: 2025-09-05T21:32:06.930Z Last Updated: 2025-09-08T20:07:46.560Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: POS Point of Sale System Problem Types: CWE-79, CWE-94 Description: A vulnerability was determined in itsourcecode POS Point of Sale System 1.0. Affected by this issue is some unknown functionality of the file /inventory/main/vendors/datatables/unit_testing/templates/2512.php. This manipulation of the argument scripts causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP
e initiated remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322742 - https://vuldb.com/?ctiid.322742 - https://vuldb.com/?submit.643942 - https://github.com/AlphabugX/CVE-Report/blob/main/CVE-004.md - https://itsourcecode.com/
CVE ID: CVE-2025-10028 State: PUBLISHED Published: 2025-09-06T06:32:06.138Z Last Updated: 2025-09-08T15:00:46.583Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: POS Point of Sale System Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in itsourcecode POS Point of Sale System 1.0. This affects an unknown part of the file /inventory/main/vendors/datatables/unit_testing/templates/6776.php. Such manipulation of the argument scripts leads to cross site scripting. The attack can be launched remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
he exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322743 - https://vuldb.com/?ctiid.322743 - https://vuldb.com/?submit.643943 - https://github.com/AlphabugX/CVE-Report/blob/main/CVE-005.md - https://itsourcecode.com/
CVE ID: CVE-2025-10029 State: PUBLISHED Published: 2025-09-06T08:32:06.224Z Last Updated: 2025-09-08T14:51:55.114Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: POS Point of Sale System Problem Types: CWE-79, CWE-94 Description: A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unit_testing/templates/complex_header_2.php. Performing manipulation of the argument scripts results in cross site scripting. The attack may be initiated remotely. The exploit has been released to the public and may be exploited. Additional Analyst
e attack may be initiated remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322744 - https://vuldb.com/?ctiid.322744 - https://vuldb.com/?submit.643944 - https://github.com/AlphabugX/CVE-Report/blob/main/CVE-006.md - https://itsourcecode.com/
CVE ID: CVE-2025-10030 State: PUBLISHED Published: 2025-09-06T10:32:06.690Z Last Updated: 2025-09-08T14:47:43.901Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Grocery Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in Campcodes Grocery Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=save_receiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
t has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322745 - https://vuldb.com/?ctiid.322745 - https://vuldb.com/?submit.643950 - https://github.com/zzb1388/cve/issues/72 - https://www.campcodes.com/
CVE ID: CVE-2025-10031 State: PUBLISHED Published: 2025-09-06T12:02:06.018Z Last Updated: 2025-09-08T14:46:58.948Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Grocery Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in Campcodes Grocery Sales and Inventory System 1.0. Impacted is an unknown function of the file /ajax.php?action=delete_sales. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
t has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322746 - https://vuldb.com/?ctiid.322746 - https://vuldb.com/?submit.643951 - https://github.com/zzb1388/cve/issues/71 - https://www.campcodes.com/
CVE ID: CVE-2025-10032 State: PUBLISHED Published: 2025-09-06T12:32:06.415Z Last Updated: 2025-09-08T14:45:32.946Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Grocery Sales and Inventory System Problem Types: CWE-79, CWE-94 Description: A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /index.php. The manipulation of the argument page results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322747 - https://vuldb
y be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322747 - https://vuldb.com/?ctiid.322747 - https://vuldb.com/?submit.643952 - https://vuldb.com/?submit.643953 - https://vuldb.com/?submit.643954 - https://github.com/zzb1388/cve/issues/70 - https://www.campcodes.com/
CVE ID: CVE-2025-10033 State: PUBLISHED Published: 2025-09-06T13:02:05.466Z Last Updated: 2025-09-08T14:44:25.294Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Discussion Forum Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322749 - https://vuldb.com/?ct
d. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322749 - https://vuldb.com/?ctiid.322749 - https://vuldb.com/?submit.643974 - https://github.com/insider-w/CVE/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-10034 State: PUBLISHED Published: 2025-09-06T14:32:05.563Z Last Updated: 2025-09-08T14:42:59.955Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-825 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function get_ping6_app_stat of the file ping6_response.cg of the component httpd. Performing manipulation of the argument ping6_ipaddr results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analy
could be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322750 - https://vuldb.com/?ctiid.322750 - https://vuldb.com/?submit.643978 - https://github.com/Jjx-wy/D-Link/blob/main/D-Link%20DIR-825%202.10.pdf - https://www.dlink.com/
CVE ID: CVE-2025-10035 State: PUBLISHED Published: 2025-09-18T22:01:51.337Z Last Updated: 2025-10-21T22:45:18.175Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Fortra Products: GoAnywhere MFT Problem Types: CWE-77, CWE-502 Description: A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.fortra.com/security/advisories/product-security/fi-2025-012
CVE ID: CVE-2025-10036 State: PUBLISHED Published: 2025-09-26T04:25:17.511Z Last Updated: 2025-11-24T20:32:21.410Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: marceljm Products: Featured Image from URL (FIFU) Problem Types: CWE-89 Description: The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to SQL Injection via the get_all_urls() function in all versions up to, and including, 5.2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into
possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ed54fe33-6467-4af2-ba28-dd17287d8f92?source=cve - https://plugins.trac.wordpress.org/browser/featured-image-from-url/trunk/admin/api.php?rev=3348285 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3362830%40featured-image-from-url&new=3362830%40featured-image-from-url&sfp_email=&sfph_mail=
CVE ID: CVE-2025-10037 State: PUBLISHED Published: 2025-09-26T04:25:16.082Z Last Updated: 2025-11-24T20:32:35.651Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: marceljm Products: Featured Image from URL (FIFU) Problem Types: CWE-89 Description: The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to SQL Injection via the get_posts_with_internal_featured_image() function in all versions up to, and including, 5.2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append ad
g SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/54c1b0e9-6fab-4452-b232-953e671f4d8d?source=cve - https://plugins.trac.wordpress.org/browser/featured-image-from-url/trunk/admin/db.php?rev=3348285 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3362830%40featured-image-from-url&new=3362830%40featured-image-from-url&sfp_email=&sfph_mail=
CVE ID: CVE-2025-10038 State: PUBLISHED Published: 2025-10-15T08:25:57.132Z Last Updated: 2025-10-15T14:01:22.449Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: letscms Products: Binary MLM Plan Problem Types: CWE-266 Description: The Binary MLM Plan plugin for WordPress is vulnerable to limited Privilege Escalation in all versions up to, and including, 3.0. This is due to bmp_user role granting all users with the manage_bmp capability by default upon registration through the plugin's form. This makes it possible for unauthenticated attackers to register and manage the plugin's settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
kers to register and manage the plugin's settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7951c8e4-b610-4cc4-ab27-4cfa78d72302?source=cve - https://wordpress.org/plugins/binary-mlm-plan/
CVE ID: CVE-2025-10039 State: PUBLISHED Published: 2025-11-21T12:28:10.054Z Last Updated: 2025-11-21T13:24:30.036Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: elextensions Products: ELEX WordPress HelpDesk & Customer Ticketing System Problem Types: CWE-639 Description: The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.2.9 via the 'eh_crm_ticket_single_view_client' due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of all suppor
akes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of all support tickets. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d9ffc0af-9c3d-4f8e-ae0b-e51c0c67dfe1?source=cve - https://plugins.trac.wordpress.org/browser/elex-helpdesk-customer-support-ticket-system/trunk/includes/class-crm-ajax-functions.php#L259 - https://plugins.trac.wordpress.org/changeset/3391342/
CVE ID: CVE-2025-10040 State: PUBLISHED Published: 2025-09-10T06:38:49.153Z Last Updated: 2025-09-10T20:30:53.265Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: smackcoders Products: WP Import – Ultimate CSV XML Importer for WordPress Problem Types: CWE-862 Description: The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_ftp_details' AJAX action in all versions up to, and including, 7.27. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve a configured set of SFTP/FTP credentials. Additional A
ed attackers, with Subscriber-level access and above, to retrieve a configured set of SFTP/FTP credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9bcdcaa4-c492-4d79-8d18-44802abd02e7?source=cve - https://plugins.trac.wordpress.org/browser/wp-ultimate-csv-importer/tags/7.26/uploadModules/FtpUpload.php#L231 - https://plugins.trac.wordpress.org/changeset/3357936/wp-ultimate-csv-importer/trunk/uploadModules/FtpUpload.php
CVE ID: CVE-2025-10041 State: PUBLISHED Published: 2025-10-15T08:25:54.047Z Last Updated: 2025-10-15T19:45:17.267Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ajitdas Products: Flex QR Code Generator Problem Types: CWE-434 Description: The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesave_qr_code_to_db() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/40000879-a5ef-48f2-97e4-77d527259af0?source=cve - https://plugins.trac.wordpress.org/browser/flex-qr-code-generator/tags/1.2.5/qr-code-generator.php#L208 - https://wordpress.org/plugins/flex-qr-code-generator/
CVE ID: CVE-2025-10042 State: PUBLISHED Published: 2025-09-17T05:18:44.163Z Last Updated: 2025-09-17T12:48:06.644Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: ays-pro Products: Quiz Maker Problem Types: CWE-89 Description: The Quiz Maker plugin for WordPress is vulnerable to SQL Injection via spoofed IP headers in all versions up to, and including, 6.7.0.56 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the datab
nd additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is only exploitable in configurations where the server is set up to retrieve the IP from a user-supplied field like `X-Forwarded-For` and limit users by IP is enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4eeae6dd-a41f-4878-aa92-064ec78367d7?source=cve - https://plugins.trac.wordpress.org/browser/quiz-maker/tags/6.7.0.52/public/class-quiz-maker-public.php - https://plugins.trac.wordpress.org/browser/quiz-maker/tags/6.7.0.52/public/class-quiz-maker-public.php#L7145 - https://plugi
s://plugins.trac.wordpress.org/browser/quiz-maker/tags/6.7.0.52/public/class-quiz-maker-public.php#L7145 - https://plugins.trac.wordpress.org/browser/quiz-maker/tags/6.7.0.57/public/class-quiz-maker-public.php#L7149
CVE ID: CVE-2025-10043 State: REJECTED Published: 2025-09-05T20:06:14.915Z Last Updated: 2025-10-09T01:45:58.716Z Description: No description available.
CVE ID: CVE-2025-10044 State: PUBLISHED Published: 2025-09-05T19:59:04.454Z Last Updated: 2025-11-07T21:05:31.177Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Red Hat Products: Red Hat build of Keycloak 26.0, Red Hat build of Keycloak 26.0.17, Red Hat build of Keycloak 26.2, Red Hat build of Keycloak 26.2.9 Problem Types: CWE-79 Description: A flaw was found in Keycloak. Keycloak’s account console and other pages accept arbitrary text in the error_description query parameter. This text is directly rendered in error pages without validation or sanitization. While HTML encoding prevents XSS, an attacker can craft URLs with misleading messages (e.g., fake s
ion or sanitization. While HTML encoding prevents XSS, an attacker can craft URLs with misleading messages (e.g., fake support phone numbers or URLs), which are displayed within the trusted Keycloak UI. This creates a phishing vector, potentially tricking users into contacting malicious actors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:16399 - https://access.redhat.com/errata/RHSA-2025:16400 - https://access.redhat.com/errata/RHSA-2025:19923 - https://access.redhat.com/errata/RHSA-2025:19925 - https://access.redhat.com/security/cve/CVE-2025-10044 - https://bugzilla.redhat.com/show_bug.cgi?id=2393551
CVE ID: CVE-2025-10045 State: PUBLISHED Published: 2025-10-15T08:25:52.005Z Last Updated: 2025-10-15T19:38:44.583Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: onofficeweb Products: onOffice for WP-Websites Problem Types: CWE-89 Description: The onOffice for WP-Websites plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter in all versions up to, and including, 5.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Editor-level access and above, to append additional SQL queries into already existing queries
henticated attackers, with Editor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/259010bd-ccb4-4907-bea8-f49e6464eaa1?source=cve - https://plugins.svn.wordpress.org/onoffice-for-wp-websites/tags/5.7/plugin/Record/RecordManagerReadListViewEstate.php#97