Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-58596 State: PUBLISHED Published: 2025-09-03T14:36:37.384Z Last Updated: 2025-09-03T17:51:46.019Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: properfraction Products: MailOptin Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in properfraction MailOptin allows Stored XSS. This issue affects MailOptin: from n/a through 1.2.75.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mailoptin/vulnerability/wordpress-mailoptin-plugin-1-2-75-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58597 State: PUBLISHED Published: 2025-09-03T14:36:37.890Z Last Updated: 2025-09-03T17:51:38.530Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Tomdever Products: wpForo Forum Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Tomdever wpForo Forum allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects wpForo Forum: from n/a through 2.4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpforo/vulnerability/wordpress-wpforo-forum-plugin-2-4-6-insecure-direct-object-references-idor-vulnera
wordpress/plugin/wpforo/vulnerability/wordpress-wpforo-forum-plugin-2-4-6-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE ID: CVE-2025-58598 State: PUBLISHED Published: 2025-09-03T14:36:38.410Z Last Updated: 2025-09-03T17:51:32.707Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N) Vendors: Klarna Products: Klarna Order Management for WooCommerce Problem Types: CWE-215 Description: Insertion of Sensitive Information Into Debugging Code vulnerability in Klarna Klarna Order Management for WooCommerce allows Retrieve Embedded Sensitive Data. This issue affects Klarna Order Management for WooCommerce: from n/a through 1.9.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/klarna-order-management-for-woocommerce/vulnerabilit
ent: References: - https://patchstack.com/database/wordpress/plugin/klarna-order-management-for-woocommerce/vulnerability/wordpress-klarna-order-management-for-woocommerce-plugin-1-9-8-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-58599 State: PUBLISHED Published: 2025-09-03T14:36:38.925Z Last Updated: 2025-09-03T17:51:26.938Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: tychesoftwares Products: Order Delivery Date for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Order Delivery Date for WooCommerce: from n/a through 4.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/order-delivery-date-for-woocommerce/vulnerability
chment: References: - https://patchstack.com/database/wordpress/plugin/order-delivery-date-for-woocommerce/vulnerability/wordpress-order-delivery-date-for-woocommerce-plugin-4-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58600 State: PUBLISHED Published: 2025-09-03T14:36:39.436Z Last Updated: 2025-09-03T17:51:18.753Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Cozmoslabs Products: Paid Member Subscriptions Problem Types: CWE-862 Description: Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Paid Member Subscriptions: from n/a through 2.15.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/paid-member-subscriptions/vulnerability/wordpress-paid-member-subscriptions-plugin-2-1
ack.com/database/wordpress/plugin/paid-member-subscriptions/vulnerability/wordpress-paid-member-subscriptions-plugin-2-15-9-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58601 State: PUBLISHED Published: 2025-09-03T14:36:39.999Z Last Updated: 2025-09-03T17:51:11.933Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: RadiusTheme Products: Classified Listing Problem Types: CWE-862 Description: Missing Authorization vulnerability in RadiusTheme Classified Listing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Classified Listing: from n/a through 5.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/classified-listing/vulnerability/wordpress-classified-listing-plugin-5-0-6-broken-access-control-vulnerabi
dpress/plugin/classified-listing/vulnerability/wordpress-classified-listing-plugin-5-0-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58602 State: PUBLISHED Published: 2025-09-03T14:36:40.603Z Last Updated: 2025-09-03T17:51:04.724Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: IfSo Dynamic Content Products: If-So Dynamic Content Personalization Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IfSo Dynamic Content If-So Dynamic Content Personalization allows Stored XSS. This issue affects If-So Dynamic Content Personalization: from n/a through 1.9.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/if-so/vulnerability/wor
t Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/if-so/vulnerability/wordpress-if-so-dynamic-content-personalization-plugin-1-9-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58603 State: PUBLISHED Published: 2025-09-03T14:36:41.143Z Last Updated: 2025-09-03T17:50:57.242Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Surfer Products: Surfer Problem Types: CWE-862 Description: Missing Authorization vulnerability in Surfer Surfer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Surfer: from n/a through 1.6.4.574. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/surferseo/vulnerability/wordpress-surfer-plugin-1-6-4-574-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58604 State: PUBLISHED Published: 2025-09-03T14:36:41.655Z Last Updated: 2025-09-03T17:50:50.181Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: WPFunnels Products: Mail Mint Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Mint allows SQL Injection. This issue affects Mail Mint: from n/a through 1.18.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mail-mint/vulnerability/wordpress-mail-mint-plugin-1-18-5-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-58605 State: PUBLISHED Published: 2025-09-03T14:36:42.218Z Last Updated: 2025-09-03T17:50:43.968Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Delicious Products: WP Delicious Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Delicious WP Delicious allows Stored XSS. This issue affects WP Delicious: from n/a through 1.8.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/delicious-recipes/vulnerability/wordpress-wp-delicious-plugin-1-8-7-cross-site-scripting-xss-vulnerability?_s_id=c
lugin/delicious-recipes/vulnerability/wordpress-wp-delicious-plugin-1-8-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58606 State: PUBLISHED Published: 2025-09-03T14:36:42.750Z Last Updated: 2025-09-03T17:50:37.944Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: CozyThemes Products: SaasLauncher Problem Types: CWE-862 Description: Missing Authorization vulnerability in CozyThemes SaasLauncher allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SaasLauncher: from n/a through 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/saaslauncher/vulnerability/wordpress-saaslauncher-theme-1-3-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58607 State: PUBLISHED Published: 2025-09-03T14:36:43.341Z Last Updated: 2025-09-03T17:50:32.237Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: GDPR Info Products: Cookie Notice &amp; Consent Banner for GDPR &amp; CCPA Compliance Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GDPR Info Cookie Notice &amp; Consent Banner for GDPR &amp; CCPA Compliance allows Stored XSS. This issue affects Cookie Notice &amp; Consent Banner for GDPR &amp; CCPA Compliance: from n/a through 1.7.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://p
mp; CCPA Compliance: from n/a through 1.7.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cookie-notice-and-consent-banner/vulnerability/wordpress-cookie-notice-consent-banner-for-gdpr-ccpa-compliance-plugin-1-7-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58608 State: PUBLISHED Published: 2025-09-03T14:36:43.930Z Last Updated: 2025-09-03T17:50:26.657Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: BuddyDev Products: MediaPress Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BuddyDev MediaPress allows PHP Local File Inclusion. This issue affects MediaPress: from n/a through 1.5.9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mediapress/vulnerability/wordpress-mediapress-plugin-1-5-9-1-local-file-inclusion-vulnerability
atabase/wordpress/plugin/mediapress/vulnerability/wordpress-mediapress-plugin-1-5-9-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-58609 State: PUBLISHED Published: 2025-09-03T14:36:44.460Z Last Updated: 2025-09-03T17:50:20.842Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Iulia Cazan Products: Latest Post Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Iulia Cazan Latest Post Shortcode allows Stored XSS. This issue affects Latest Post Shortcode: from n/a through 14.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/latest-post-shortcode/vulnerability/wordpress-latest-post-shortcode-plugin-14-0-3-cross-
k.com/database/wordpress/plugin/latest-post-shortcode/vulnerability/wordpress-latest-post-shortcode-plugin-14-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58610 State: PUBLISHED Published: 2025-09-03T14:36:44.976Z Last Updated: 2025-09-03T17:50:15.349Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Chill Products: Gallery PhotoBlocks Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery PhotoBlocks allows Stored XSS. This issue affects Gallery PhotoBlocks: from n/a through 1.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/photoblocks-grid-gallery/vulnerability/wordpress-gallery-photoblocks-plugin-1-3-1-cross-site-scriptin
e/wordpress/plugin/photoblocks-grid-gallery/vulnerability/wordpress-gallery-photoblocks-plugin-1-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58611 State: PUBLISHED Published: 2025-09-03T14:36:45.494Z Last Updated: 2025-09-03T17:50:09.706Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Tickera Products: Tickera Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Tickera Tickera allows Cross Site Request Forgery. This issue affects Tickera: from n/a through 3.5.5.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/tickera-event-ticketing-system/vulnerability/wordpress-tickera-plugin-3-5-5-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58612 State: PUBLISHED Published: 2025-09-03T14:36:46.019Z Last Updated: 2025-09-03T17:50:01.266Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Property Hive Products: PropertyHive Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Property Hive PropertyHive allows Stored XSS. This issue affects PropertyHive: from n/a through 2.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/propertyhive/vulnerability/wordpress-propertyhive-plugin-2-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58613 State: PUBLISHED Published: 2025-09-03T14:36:46.534Z Last Updated: 2025-09-03T17:49:55.499Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Barn2 Plugins Products: Posts Table with Search & Sort Problem Types: CWE-862 Description: Missing Authorization vulnerability in Barn2 Plugins Posts Table with Search & Sort allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Posts Table with Search & Sort: from n/a through 1.4.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/posts-data-table/vulnerability/wordpress-posts-table-with-search-
es: - https://patchstack.com/database/wordpress/plugin/posts-data-table/vulnerability/wordpress-posts-table-with-search-sort-plugin-1-4-10-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58614 State: PUBLISHED Published: 2025-09-03T14:36:47.066Z Last Updated: 2025-09-03T17:49:49.674Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Jamel.Z Products: Tooltipy Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jamel.Z Tooltipy allows Stored XSS. This issue affects Tooltipy: from n/a through 5.5.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bluet-keywords-tooltip-generator/vulnerability/wordpress-tooltipy-plugin-5-5-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58615 State: PUBLISHED Published: 2025-09-03T14:36:47.587Z Last Updated: 2025-09-03T17:49:44.273Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: gfazioli Products: WP Bannerize Pro Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in gfazioli WP Bannerize Pro allows Server Side Request Forgery. This issue affects WP Bannerize Pro: from n/a through 1.10.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-bannerize-pro/vulnerability/wordpress-wp-bannerize-pro-plugin-1-10-0-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58616 State: PUBLISHED Published: 2025-09-03T14:36:48.093Z Last Updated: 2025-09-03T17:49:38.763Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Frisbii Products: Frisbii Pay Problem Types: CWE-862 Description: Missing Authorization vulnerability in Frisbii Frisbii Pay allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Frisbii Pay: from n/a through 1.8.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/reepay-checkout-gateway/vulnerability/wordpress-frisbii-pay-plugin-1-8-2-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58617 State: PUBLISHED Published: 2025-09-03T14:36:48.606Z Last Updated: 2025-09-03T17:49:33.419Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: FAKTOR VIER Products: F4 Media Taxonomies Problem Types: CWE-862 Description: Missing Authorization vulnerability in FAKTOR VIER F4 Media Taxonomies allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects F4 Media Taxonomies: from n/a through 1.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/f4-media-taxonomies/vulnerability/wordpress-f4-media-taxonomies-plugin-1-1-4-broken-access-control-vuln
wordpress/plugin/f4-media-taxonomies/vulnerability/wordpress-f4-media-taxonomies-plugin-1-1-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58618 State: PUBLISHED Published: 2025-09-03T14:36:49.169Z Last Updated: 2025-09-03T17:49:27.885Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Jonathan Jernigan Products: Pie Calendar Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jonathan Jernigan Pie Calendar allows DOM-Based XSS. This issue affects Pie Calendar: from n/a through 1.2.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pie-calendar/vulnerability/wordpress-pie-calendar-plugin-1-2-8-cross-site-scripting-xss-vulnerability
e/wordpress/plugin/pie-calendar/vulnerability/wordpress-pie-calendar-plugin-1-2-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58619 State: PUBLISHED Published: 2025-11-06T15:54:22.879Z Last Updated: 2025-11-13T10:33:42.648Z Vendors: sbouey Products: Falang multilanguage Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in sbouey Falang multilanguage falang allows Object Injection.This issue affects Falang multilanguage: from n/a through <= 1.3.65. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/falang/vulnerability/wordpress-falang-multilanguage-plugin-1-3-65-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-58620 State: PUBLISHED Published: 2025-09-03T14:36:49.757Z Last Updated: 2025-09-03T17:49:22.404Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: add-ons.org Products: PDF for WPForms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in add-ons.org PDF for WPForms allows Stored XSS. This issue affects PDF for WPForms: from n/a through 6.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pdf-for-wpforms/vulnerability/wordpress-pdf-for-wpforms-plugin-6-2-1-cross-site-scripting-xss-vulnerability
press/plugin/pdf-for-wpforms/vulnerability/wordpress-pdf-for-wpforms-plugin-6-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58621 State: PUBLISHED Published: 2025-09-03T14:36:50.352Z Last Updated: 2025-09-03T17:49:16.995Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Amuse Labs Products: PuzzleMe for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amuse Labs PuzzleMe for WordPress allows Stored XSS. This issue affects PuzzleMe for WordPress: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/puzzleme/vulnerability/wordpress-puzzleme-for-wordpress-plugin-1-2-0-cross-site-scriptin
k.com/database/wordpress/plugin/puzzleme/vulnerability/wordpress-puzzleme-for-wordpress-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58622 State: PUBLISHED Published: 2025-09-03T14:36:50.930Z Last Updated: 2025-09-03T17:49:11.645Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: yydevelopment Products: Mobile Contact Line Problem Types: CWE-862 Description: Missing Authorization vulnerability in yydevelopment Mobile Contact Line allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mobile Contact Line: from n/a through 2.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mobile-contact-line/vulnerability/wordpress-mobile-contact-line-plugin-2-4-0-broken-access-control-
ase/wordpress/plugin/mobile-contact-line/vulnerability/wordpress-mobile-contact-line-plugin-2-4-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58623 State: PUBLISHED Published: 2025-09-03T14:36:51.466Z Last Updated: 2025-09-03T17:49:05.106Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Bohemia Plugins Products: Event Feed for Eventbrite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bohemia Plugins Event Feed for Eventbrite allows DOM-Based XSS. This issue affects Event Feed for Eventbrite: from n/a through 1.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/event-feed-for-eventbrite/vulnerability/wordpress-event-feed-for-e
s: - https://patchstack.com/database/wordpress/plugin/event-feed-for-eventbrite/vulnerability/wordpress-event-feed-for-eventbrite-plugin-1-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58624 State: PUBLISHED Published: 2025-09-03T14:36:51.995Z Last Updated: 2025-09-03T17:48:57.399Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: falselight Products: Exchange Rates Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in falselight Exchange Rates allows Stored XSS. This issue affects Exchange Rates: from n/a through 1.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/exchange-rates/vulnerability/wordpress-exchange-rates-plugin-1-2-5-cross-site-scripting-xss-vulnerability?_s_id=
/plugin/exchange-rates/vulnerability/wordpress-exchange-rates-plugin-1-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58625 State: PUBLISHED Published: 2025-09-03T14:36:52.506Z Last Updated: 2025-09-03T17:48:50.823Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Spiffy Plugins Products: WP Flow Plus Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins WP Flow Plus allows Stored XSS. This issue affects WP Flow Plus: from n/a through 5.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-imageflow2/vulnerability/wordpress-wp-flow-plus-plugin-5-2-5-cross-site-scripting-xss-vulnerability?_s_id=c
ss/plugin/wp-imageflow2/vulnerability/wordpress-wp-flow-plus-plugin-5-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve