Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-12743 State: PUBLISHED Published: 2025-11-19T16:41:30.639Z Last Updated: 2025-11-19T18:47:37.355Z Vendors: Google Cloud Products: Looker Problem Types: CWE-89 Description: The Looker endpoint for generating new projects from database connections allows users to specify "looker" as a connection name, which is a reserved internal name for Looker's internal MySQL database. The schemas parameter is vulnerable to SQL injection, enabling attackers to manipulate SELECT queries that are constructed and executed against the internal MySQL database. This vulnerability allows users with developer permissions to extract data from Looker's internal MySQL database. Looker-hosted and Self-
y allows users with developer permissions to extract data from Looker's internal MySQL database. Looker-hosted and Self-hosted were found to be vulnerable. This issue has already been mitigated for Looker-hosted instances. No user action is required for these. Self-hosted instances must be upgraded as soon as possible. This vulnerability has been patched in all supported versions of Self-hosted. The versions below have all been updated to protect against this vulnerability. You can download these versions at the Looker download page https://download.looker.com/ : * 24.12.106 * 24.18.198+ * 25.0.75 * 25.6.63+ * 25.8.45+ * 25.10.33+ * 25.12.1+ * 25.14+ Additional Analyst Notes: - CISA ADP Vuln
6 * 24.18.198+ * 25.0.75 * 25.6.63+ * 25.8.45+ * 25.10.33+ * 25.12.1+ * 25.14+ Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cloud.google.com/support/bulletins#gcp-2025-052 - https://www.tenable.com/security/research/tra-2025-43
CVE ID: CVE-2025-12745 State: PUBLISHED Published: 2025-11-05T18:32:07.580Z Last Updated: 2025-11-05T19:26:04.149Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: QuickJS Problem Types: CWE-126, CWE-119 Description: A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function js_array_buffer_slice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local execution. The exploit has been made available to the public and could be exploited. This product adopts a rolling release strategy to maintain continuous delivery Patch name: c6fe5a98
could be exploited. This product adopts a rolling release strategy to maintain continuous delivery Patch name: c6fe5a98fd3ef3b7064e6e0145dfebfe12449fea. To fix this issue, it is recommended to deploy a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.331268 - https://vuldb.com/?ctiid.331268 - https://vuldb.com/?submit.678850 - https://github.com/bellard/quickjs/issues/451 - https://github.com/bellard/quickjs/issues/451#issuecomment-3481807558 - https://github.com/bellard/quickjs/issues/451#issue-3533698042 - https://github.com/bellard/quickjs/commit/c6fe5a98fd3ef3b7064e6e0145dfebfe12449fea
CVE ID: CVE-2025-12746 State: PUBLISHED Published: 2025-11-21T07:31:45.319Z Last Updated: 2025-11-24T18:08:51.225Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: tainacan Products: Tainacan Problem Types: CWE-79 Description: The Tainacan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: -
if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/014dd0ee-0bd0-477c-a0fa-bde8ce5a099c?source=cve - https://github.com/tainacan/tainacan/blob/2491612ee9d5b14baa70862ba2308ee925de0938/src/classes/theme-helper/template-tags.php#L1652 - https://plugins.trac.wordpress.org/changeset/3395909/tainacan/trunk/classes/theme-helper/template-tags.php
CVE ID: CVE-2025-12747 State: PUBLISHED Published: 2025-11-21T16:28:14.277Z Last Updated: 2025-11-21T16:40:28.800Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: tainacan Products: Tainacan Problem Types: CWE-552 Description: The Tainacan plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.0 via uploaded files marked as private being exposed in wp-content without adequate protection. This makes it possible for unauthenticated attackers to extract potentially sensitive information from files that have been marked as private. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence
that have been marked as private. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c64869f0-a4dd-4135-8ed8-a6ff82a48e1f?source=cve - https://github.com/tainacan/tainacan/blob/2491612ee9d5b14baa70862ba2308ee925de0938/src/classes/class-tainacan-private-files.php - https://github.com/tainacan/tainacan/compare/1.0.0...1.0.1
CVE ID: CVE-2025-12748 State: PUBLISHED Published: 2025-11-11T19:49:32.255Z Last Updated: 2025-11-17T17:39:20.186Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-770 Description: A flaw was discovered in libvirt in the XML file processing. More specifically, the parsing of user provided XML files was performed before the ACL checks. A malicious user with limited permissions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory
missions could exploit this flaw by submitting a specially crafted XML file, causing libvirt to allocate too much memory on the host. The excessive memory consumption could lead to a libvirt process crash on the host, resulting in a denial-of-service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-12748 - https://bugzilla.redhat.com/show_bug.cgi?id=2413801
CVE ID: CVE-2025-12750 State: PUBLISHED Published: 2025-11-21T09:27:02.976Z Last Updated: 2025-11-21T15:04:10.222Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: trainingbusinesspros Products: Groundhogg — CRM, Newsletters, and Marketing Automation Problem Types: CWE-89 Description: The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to SQL Injection via the 'term' parameter in all versions up to, and including, 4.2.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level
ient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e3d231e1-a63e-4b41-a6b7-91e6dfc33600?source=cve - https://github.com/groundhoggwp/groundhogg/blob/master/includes/functions.php#L5705 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3394550%40groundhogg&new=3394550%40groundhogg&sfp_email=&sfph_mail=#file14
CVE ID: CVE-2025-12751 State: PUBLISHED Published: 2025-11-19T05:45:11.235Z Last Updated: 2025-11-19T20:17:52.648Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: elextensions Products: WSChat – WordPress Live Chat Problem Types: CWE-862 Description: The WSChat – WordPress Live Chat plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'reset_settings' AJAX endpoint in all versions up to, and including, 3.1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset the plugin's settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
access and above, to reset the plugin's settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0be6658d-aec8-404c-a994-bde10a3cdbac?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3395773%40wschat-live-chat&new=3395773%40wschat-live-chat&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12752 State: PUBLISHED Published: 2025-11-22T07:29:19.967Z Last Updated: 2025-11-24T19:32:47.365Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: scottpaterson Products: Subscriptions & Memberships for PayPal Problem Types: CWE-345 Description: The Subscriptions & Memberships for PayPal plugin for WordPress is vulnerable to fake payment creation in all versions up to, and including, 1.1.7. This is due to the plugin not properly verifying the authenticity of an IPN request. This makes it possible for unauthenticated attackers to create fake payment entries that have not actually occurred. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
s to create fake payment entries that have not actually occurred. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8f706b78-2d67-442c-b7a0-7d7a0fd24b2d?source=cve - https://plugins.trac.wordpress.org/browser/subscriptions-memberships-for-paypal/trunk/includes/public_ipn.php - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3397608%40subscriptions-memberships-for-paypal&new=3397608%40subscriptions-memberships-for-paypal&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12753 State: PUBLISHED Published: 2025-11-11T03:30:44.608Z Last Updated: 2025-11-14T15:30:53.422Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: sagortouch Products: Chart Expert Problem Types: CWE-80 Description: The Chart Expert plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pmzez_chart' shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping on user supplied shortcode attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user ac
, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8ed413a9-bf1d-4564-b740-4c92ec2c2249?source=cve - https://plugins.trac.wordpress.org/browser/chart-expert/tags/1.0/inc/shortcode.php#L1 - https://plugins.trac.wordpress.org/browser/chart-expert/tags/1.0/inc/shortcode.php#L95
CVE ID: CVE-2025-12754 State: PUBLISHED Published: 2025-11-11T03:30:38.528Z Last Updated: 2025-11-12T20:07:42.363Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: rampantlogic Products: Geopost Problem Types: CWE-79 Description: The Geopost plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'height' parameter of the 'geopost' shortcode in all versions up to, and including, 1.2. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a use
kers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4c38ca9a-895b-4d59-94c9-c7d5ba3b1b7d?source=cve - https://plugins.trac.wordpress.org/browser/geopost/tags/1.2/geopost.php#L15 - https://plugins.trac.wordpress.org/browser/geopost/tags/1.2/geopost.php#L20
CVE ID: CVE-2025-12759 State: REJECTED Published: N/A Last Updated: 2025-11-23T22:19:16.849Z Description: No description available.
CVE ID: CVE-2025-12760 State: PUBLISHED Published: 2025-11-18T16:55:59.017Z Last Updated: 2025-11-18T20:30:29.114Z Vendors: Drupal Products: Email TFA Problem Types: CWE-288 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-115
CVE ID: CVE-2025-12761 State: PUBLISHED Published: 2025-11-18T16:56:14.234Z Last Updated: 2025-11-18T20:33:44.934Z Vendors: Drupal Products: Simple multi step form Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Simple multi step form allows Cross-Site Scripting (XSS).This issue affects Simple multi step form: from 0.0.0 before 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-116
CVE ID: CVE-2025-12762 State: PUBLISHED Published: 2025-11-13T13:00:02.005Z Last Updated: 2025-11-14T04:55:28.003Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: pgadmin.org Products: pgAdmin 4 Description: pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting pgAdmin, posing a critical risk to the integrity and security of the database management system and underlying data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
the database management system and underlying data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pgadmin-org/pgadmin4/issues/9320
CVE ID: CVE-2025-12763 State: PUBLISHED Published: 2025-11-13T13:00:08.048Z Last Updated: 2025-11-14T04:55:28.677Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: pgadmin.org Products: pgAdmin 4 Description: pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused by the use of shell=True during backup and restore operations, enabling attackers to execute arbitrary system commands by providing specially crafted file path input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pgadmin-org/pgadmin4/issues/9323
CVE ID: CVE-2025-12764 State: PUBLISHED Published: 2025-11-13T13:00:10.595Z Last Updated: 2025-11-13T14:02:00.502Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: pgadmin.org Products: pgAdmin 4 Description: pgAdmin <= 9.9 is affected by an LDAP injection vulnerability in the LDAP authentication flow that allows an attacker to inject special LDAP characters in the username, causing the DC/LDAP server and the client to process an unusual amount of data DOS. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pgadmin-org/pgadmin4/issues/9325
CVE ID: CVE-2025-12765 State: PUBLISHED Published: 2025-11-13T13:00:11.448Z Last Updated: 2025-11-13T14:00:56.314Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: pgadmin.org Products: pgAdmin 4 Description: pgAdmin <= 9.9 is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pgadmin-org/pgadmin4/issues/9324
CVE ID: CVE-2025-12766 State: PUBLISHED Published: 2025-11-19T16:08:50.016Z Last Updated: 2025-11-19T17:42:27.044Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: BlackBerry Products: BlackBerry® AtHoc® (OnPrem) Problem Types: CWE-639 Description: An Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of BlackBerry® AtHoc® (OnPrem) version 7.21 could allow an attacker to potentially gain unauthorized knowledge about other organizations hosted on the same Interactive Warning System (IWS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.blackberry.com/pkb/s/article/140929
CVE ID: CVE-2025-12770 State: PUBLISHED Published: 2025-11-19T03:29:39.208Z Last Updated: 2025-11-19T19:10:18.802Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: saadiqbal Products: New User Approve Problem Types: CWE-200 Description: The New User Approve plugin for WordPress is vulnerable to unauthorized data disclosure in all versions up to, and including, 3.0.9 due to insufficient API key validation using loose equality comparison. This makes it possible for unauthenticated attackers to retrieve personally identifiable information (PII), including usernames and email addresses of users with various approval statuses via the Zapier REST API endpoints, by
, including usernames and email addresses of users with various approval statuses via the Zapier REST API endpoints, by exploiting PHP type juggling with the api_key parameter set to "0" on sites where the Zapier API key has not been configured. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3f1cf77a-64b4-405b-adcb-ef16d9e82ab2?source=cve - https://plugins.trac.wordpress.org/browser/new-user-approve/tags/3.0.9/includes/zapier/includes/rest-api.php#L104 - https://plugins.trac.wordpress.org/browser/new-user-approve/tags/3.0.9/includes/zapier/includes/rest-api.php#L40 - https://plugins.trac.wordpress.org/browser/new-use
w-user-approve/tags/3.0.9/includes/zapier/includes/rest-api.php#L40 - https://plugins.trac.wordpress.org/browser/new-user-approve/trunk/includes/zapier/includes/rest-api.php#L104
CVE ID: CVE-2025-12775 State: PUBLISHED Published: 2025-11-18T08:27:35.732Z Last Updated: 2025-11-18T21:48:02.108Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: nazsabuz Products: WP Dropzone Problem Types: CWE-434 Description: The WP Dropzone plugin for WordPress is vulnerable to authenticated arbitrary file upload in all versions up to, and including, 1.1.0 via the `ajax_upload_handle` function. This is due to the chunked upload functionality writing files directly to the uploads directory before any file type validation occurs. This makes it possible for authenticated attackers, with subscriber level access and above, to upload arbitrary files on the affe
s it possible for authenticated attackers, with subscriber level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/afd7aeb7-2c6f-4b23-b8b1-52fb010e5aac?source=cve - https://plugins.trac.wordpress.org/browser/wp-dropzone/tags/1.1.0/includes/class-plugin.php#L88 - https://plugins.trac.wordpress.org/browser/wp-dropzone/tags/1.1.0/includes/class-plugin.php#L127 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3395966%40wp-dropzone&new=3395966%40wp-dropzone&sfp_email=&sfph
dpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3395966%40wp-dropzone&new=3395966%40wp-dropzone&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12777 State: PUBLISHED Published: 2025-11-19T03:29:38.579Z Last Updated: 2025-11-19T19:09:51.646Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: yithemes Products: YITH WooCommerce Wishlist Problem Types: CWE-285 Description: The YITH WooCommerce Wishlist plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.10.0. This is due to the plugin not properly verifying that a user is authorized to perform actions on the REST API /wp-json/yith/wishlist/v1/lists endpoint (which uses permission_callback => '__return_true') and the AJAX delete_item handler (which only checks nonce validity without verifying
ission_callback => '__return_true') and the AJAX delete_item handler (which only checks nonce validity without verifying object-level authorization). This makes it possible for unauthenticated attackers to disclose wishlist tokens for any user and subsequently delete wishlist items by chaining the REST API authorization bypass with the exposed delete_item nonce on shared wishlist pages and the AJAX handler's missing object-level authorization check. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0088a97c-5a06-4500-a923-242499596aca?source=cve - https://plugins.trac.wordpress.org/browser/yith-woocommerce-wishlist/tags
8a97c-5a06-4500-a923-242499596aca?source=cve - https://plugins.trac.wordpress.org/browser/yith-woocommerce-wishlist/tags/4.10.0/includes/rest-api/controllers/v1/class-yith-wcwl-rest-v1-lists-controller.php#L56 - https://plugins.trac.wordpress.org/browser/yith-woocommerce-wishlist/tags/4.10.0/includes/rest-api/controllers/v1/class-yith-wcwl-rest-v1-lists-controller.php#L96 - https://plugins.trac.wordpress.org/browser/yith-woocommerce-wishlist/tags/4.10.0/includes/class-yith-wcwl-frontend.php#L740 - https://plugins.trac.wordpress.org/browser/yith-woocommerce-wishlist/tags/4.10.0/includes/class-yith-wcwl-ajax-handler.php#L222 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&
0.0/includes/class-yith-wcwl-ajax-handler.php#L222 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3394933%40yith-woocommerce-wishlist%2Ftrunk&old=3379519%40yith-woocommerce-wishlist%2Ftrunk&sfp_email=&sfph_mail=#file0
CVE ID: CVE-2025-12778 State: PUBLISHED Published: 2025-11-20T04:37:14.431Z Last Updated: 2025-11-20T19:26:35.250Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: userelements Products: Ultimate Member Widgets for Elementor – WordPress User Directory Problem Types: CWE-862 Description: The Ultimate Member Widgets for Elementor – WordPress User Directory plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handle_filter_users function in all versions up to, and including, 2.3. This makes it possible for unauthenticated attackers to extract partial metadata of all WordPress users, including their first name
it possible for unauthenticated attackers to extract partial metadata of all WordPress users, including their first name, last name and email addresses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a917a24b-09cc-48e9-844a-e1ed573a708f?source=cve - https://plugins.trac.wordpress.org/changeset/3397029/ultimate-member-widgets-for-elementor
CVE ID: CVE-2025-12779 State: PUBLISHED Published: 2025-11-05T21:20:51.567Z Last Updated: 2025-11-10T18:52:51.286Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Amazon Products: Amazon WorkSpaces Problem Types: CWE-497 Description: Improper handling of the authentication token in the Amazon WorkSpaces client for Linux, versions 2023.0 through 2024.8, may expose the authentication token for DCV-based WorkSpaces to other local users on the same client machine. Under certain circumstances, a local user may be able to extract another local user's authentication token from the shared client machine and access their WorkSpace. To mitigate this issue, users should