Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-22531 State: PUBLISHED Published: 2025-01-07T14:57:27.312Z Last Updated: 2025-08-26T19:48:04.453Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: M Bilal M Products: Urdu Formatter – Shamil Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M Bilal M Urdu Formatter – Shamil allows Stored XSS.This issue affects Urdu Formatter – Shamil: from n/a through 0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/urdu-formatter-shamil/vulnerability/wordpress-urdu-formatter-shamil-plugin-0-1-cross-site-
com/database/wordpress/plugin/urdu-formatter-shamil/vulnerability/wordpress-urdu-formatter-shamil-plugin-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22532 State: PUBLISHED Published: 2025-01-07T14:57:26.748Z Last Updated: 2025-08-26T19:43:00.438Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Nagy Sandor Products: Simple Photo Sphere Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nagy Sandor Simple Photo Sphere allows Stored XSS.This issue affects Simple Photo Sphere: from n/a through 0.0.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-photo-sphere/vulnerability/wordpress-simple-photo-sphere-plugin-0-0-10-cross-site-script
atabase/wordpress/plugin/simple-photo-sphere/vulnerability/wordpress-simple-photo-sphere-plugin-0-0-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22533 State: PUBLISHED Published: 2025-01-07T14:57:26.160Z Last Updated: 2025-01-07T16:39:00.945Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: WOOEXIM.COM Products: WOOEXIM Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WOOEXIM.COM WOOEXIM allows SQL Injection.This issue affects WOOEXIM: from n/a through 5.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wooexim/vulnerability/wordpress-wooexim-plugin-5-0-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-22534 State: PUBLISHED Published: 2025-01-07T14:57:25.534Z Last Updated: 2025-01-07T16:40:18.320Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Ella van Durpe Products: Slides & Presentations Problem Types: CWE-862 Description: Missing Authorization vulnerability in Ella van Durpe Slides & Presentations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slides & Presentations: from n/a through 0.0.39. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/slide/vulnerability/wordpress-slides-presentations-plugin-0-0-39-broken-access-control-v
k.com/database/wordpress/plugin/slide/vulnerability/wordpress-slides-presentations-plugin-0-0-39-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-22535 State: PUBLISHED Published: 2025-01-09T15:39:26.158Z Last Updated: 2025-01-10T20:40:35.165Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Jonathan Kern Products: WPListCal Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jonathan Kern WPListCal allows SQL Injection.This issue affects WPListCal: from n/a through 1.3.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wplistcal/vulnerability/wordpress-wplistcal-plugin-1-3-5-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-22536 State: PUBLISHED Published: 2025-01-07T14:57:24.913Z Last Updated: 2025-01-07T17:15:56.743Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: Hiren Patel Products: WP Music Player Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hiren Patel WP Music Player allows SQL Injection.This issue affects WP Music Player: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-music-player/vulnerability/wordpress-wp-music-player-plugin-1-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-22537 State: PUBLISHED Published: 2025-01-09T15:39:25.513Z Last Updated: 2025-01-10T20:40:51.068Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: traveller11 Products: Google Maps Travel Route Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in traveller11 Google Maps Travel Route allows SQL Injection.This issue affects Google Maps Travel Route: from n/a through 1.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/google-maps-travel-route/vulnerability/wordpress-google-maps-travel-route-plugin
atchstack.com/database/wordpress/plugin/google-maps-travel-route/vulnerability/wordpress-google-maps-travel-route-plugin-1-3-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-22538 State: PUBLISHED Published: 2025-01-07T14:57:24.269Z Last Updated: 2025-01-07T17:17:48.665Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ofek Nakar Products: Virtual Bot Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ofek Nakar Virtual Bot allows Stored XSS.This issue affects Virtual Bot: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/virtual-bot/vulnerability/wordpress-virtual-bot-plugin-1-0-0-csrf-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22539 State: PUBLISHED Published: 2025-01-09T15:39:24.969Z Last Updated: 2025-01-10T20:40:59.205Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ka2 Products: Custom DataBase Tables Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ka2 Custom DataBase Tables allows Reflected XSS.This issue affects Custom DataBase Tables: from n/a through 2.1.34. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-database-tables/vulnerability/wordpress-custom-database-tables-plugin-2-1-34-reflected-cross-s
e/wordpress/plugin/custom-database-tables/vulnerability/wordpress-custom-database-tables-plugin-2-1-34-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22540 State: PUBLISHED Published: 2025-01-09T15:39:24.396Z Last Updated: 2025-01-10T20:41:10.867Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Sebastian Orellana Products: Emailing Subscription Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sebastian Orellana Emailing Subscription allows Blind SQL Injection.This issue affects Emailing Subscription: from n/a through 1.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/email-suscripcion/vulnerability/wordpress-emailing-subscription-p
es: - https://patchstack.com/database/wordpress/plugin/email-suscripcion/vulnerability/wordpress-emailing-subscription-plugin-1-4-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-22541 State: PUBLISHED Published: 2025-01-07T14:57:23.609Z Last Updated: 2025-01-07T17:30:01.820Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Etruel Developments LLC Products: WP Delete Post Copies Problem Types: CWE-862 Description: Missing Authorization vulnerability in Etruel Developments LLC WP Delete Post Copies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Delete Post Copies: from n/a through 5.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/etruel-del-post-copies/vulnerability/wordpress-wp-delete-post-copies-plugin-
://patchstack.com/database/wordpress/plugin/etruel-del-post-copies/vulnerability/wordpress-wp-delete-post-copies-plugin-5-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-22542 State: PUBLISHED Published: 2025-01-09T15:39:23.809Z Last Updated: 2025-01-10T20:41:18.541Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Ofek Nakar Products: Virtual Bot Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ofek Nakar Virtual Bot allows Blind SQL Injection.This issue affects Virtual Bot: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/virtual-bot/vulnerability/wordpress-virtual-bot-plugin-1-0-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-22543 State: PUBLISHED Published: 2025-01-07T14:57:22.992Z Last Updated: 2025-01-07T16:13:04.847Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Beautiful Templates Products: ST Gallery WP Problem Types: CWE-862 Description: Missing Authorization vulnerability in Beautiful Templates ST Gallery WP allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ST Gallery WP: from n/a through 1.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/st-gallery-wp/vulnerability/wordpress-st-gallery-wp-plugin-1-0-8-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-22544 State: PUBLISHED Published: 2025-01-07T14:57:22.324Z Last Updated: 2025-01-07T16:12:36.090Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Mind Doodle Products: Mind Doodle Visual Sitemaps & Tasks Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mind Doodle Mind Doodle Visual Sitemaps & Tasks allows Stored XSS.This issue affects Mind Doodle Visual Sitemaps & Tasks: from n/a through 1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mind-doodle-sitemap/vulnerability/wordpress-mind-d
hment: References: - https://patchstack.com/database/wordpress/plugin/mind-doodle-sitemap/vulnerability/wordpress-mind-doodle-visual-sitemaps-tasks-plugin-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22545 State: PUBLISHED Published: 2025-01-07T14:57:21.750Z Last Updated: 2025-01-07T16:39:24.598Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: sw-galati.ro Products: iframe to embed Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sw-galati.ro iframe to embed allows Stored XSS.This issue affects iframe to embed: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/iframe-to-embed/vulnerability/wordpress-iframe-to-embed-plugin-1-2-cross-site-scripting-xss-vulnerability?_s
ress/plugin/iframe-to-embed/vulnerability/wordpress-iframe-to-embed-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22546 State: PUBLISHED Published: 2025-01-07T14:57:21.122Z Last Updated: 2025-01-07T16:39:53.261Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: One Plus Solution Products: jQuery TwentyTwenty Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in One Plus Solution jQuery TwentyTwenty allows Stored XSS.This issue affects jQuery TwentyTwenty: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/js-twentytwenty/vulnerability/wordpress-jquery-twentytwenty-plugin-1-0-cross-site-scri
ack.com/database/wordpress/plugin/js-twentytwenty/vulnerability/wordpress-jquery-twentytwenty-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22547 State: PUBLISHED Published: 2025-01-07T14:57:20.515Z Last Updated: 2025-01-07T16:40:43.839Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Jay Krishnan G Products: JK Html To Pdf Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jay Krishnan G JK Html To Pdf allows Stored XSS.This issue affects JK Html To Pdf: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/jk-html-to-pdf/vulnerability/wordpress-jk-html-to-pdf-plugin-1-0-0-csrf-to-stored-xss-vulnerability?_s_id=c
press/plugin/jk-html-to-pdf/vulnerability/wordpress-jk-html-to-pdf-plugin-1-0-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22548 State: PUBLISHED Published: 2025-01-07T14:57:19.702Z Last Updated: 2025-01-07T16:41:06.437Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Frank Koenen Products: ldap_login_password_and_role_manager Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Frank Koenen ldap_login_password_and_role_manager allows Stored XSS.This issue affects ldap_login_password_and_role_manager: from n/a through 1.0.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ldap-login-password-and-role-manager/vulnera
ulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ldap-login-password-and-role-manager/vulnerability/wordpress-ldap-login-password-and-role-manager-plugin-1-0-12-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22549 State: PUBLISHED Published: 2025-01-07T14:57:19.102Z Last Updated: 2025-01-07T16:42:04.108Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Pablo Cornehl Products: WP Github Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pablo Cornehl WP Github allows Stored XSS.This issue affects WP Github: from n/a through 1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-github/vulnerability/wordpress-wp-github-plugin-1-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22550 State: PUBLISHED Published: 2025-01-07T14:57:18.520Z Last Updated: 2025-01-07T16:28:52.829Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: AddFunc Products: AddFunc Mobile Detect Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AddFunc AddFunc Mobile Detect allows Stored XSS.This issue affects AddFunc Mobile Detect: from n/a through 3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/addfunc-mobile-detect/vulnerability/wordpress-addfunc-mobile-detect-plugin-3-1-cross-site-scripting-
se/wordpress/plugin/addfunc-mobile-detect/vulnerability/wordpress-addfunc-mobile-detect-plugin-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22551 State: PUBLISHED Published: 2025-01-07T14:57:17.949Z Last Updated: 2025-01-07T16:30:49.690Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Julien Crego Products: Boot-Modal Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Julien Crego Boot-Modal allows Stored XSS.This issue affects Boot-Modal: from n/a through 1.9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/boot-modal/vulnerability/wordpress-boot-modal-plugin-1-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22552 State: PUBLISHED Published: 2025-01-07T14:57:17.248Z Last Updated: 2025-01-07T16:31:18.642Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Jason Keeley, Bryan Nielsen Products: Affiliate Disclosure Statement Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Jason Keeley, Bryan Nielsen Affiliate Disclosure Statement allows Cross Site Request Forgery.This issue affects Affiliate Disclosure Statement: from n/a through 0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/affiliate-disclosure-statement/vulnerability/wordpress-affiliate-disc
- https://patchstack.com/database/wordpress/plugin/affiliate-disclosure-statement/vulnerability/wordpress-affiliate-disclosure-statement-plugin-0-3-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22553 State: PUBLISHED Published: 2025-01-21T13:40:34.650Z Last Updated: 2025-01-21T14:31:56.281Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: NotFound Products: Multiple Carousel Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Multiple Carousel allows SQL Injection. This issue affects Multiple Carousel: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/multicarousel/vulnerability/wordpress-multiple-carousel-plugin-2-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-22554 State: PUBLISHED Published: 2025-01-07T14:57:16.617Z Last Updated: 2025-01-07T16:32:20.332Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Eric Franklin Products: Video Embed Optimizer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eric Franklin Video Embed Optimizer allows Stored XSS.This issue affects Video Embed Optimizer: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/video-embed-optimizer/vulnerability/wordpress-video-embed-optimizer-plugin-1-0-0-cross
ack.com/database/wordpress/plugin/video-embed-optimizer/vulnerability/wordpress-video-embed-optimizer-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22555 State: PUBLISHED Published: 2025-01-07T14:57:15.982Z Last Updated: 2025-01-07T16:32:53.811Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Noel Jarencio. Products: Smoothness Slider Shortcode Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Noel Jarencio. Smoothness Slider Shortcode allows Cross Site Request Forgery.This issue affects Smoothness Slider Shortcode: from n/a through v1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smoothness-slider-shortcode/vulnerability/wordpress-smoothness-slider-shortcode-plugin-v1-2-2-csrf-to
e/wordpress/plugin/smoothness-slider-shortcode/vulnerability/wordpress-smoothness-slider-shortcode-plugin-v1-2-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22556 State: PUBLISHED Published: 2025-01-07T14:57:15.276Z Last Updated: 2025-01-07T16:13:32.519Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Greg Whitehead Products: Norse Rune Oracle Plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Greg Whitehead Norse Rune Oracle Plugin allows Cross Site Request Forgery.This issue affects Norse Rune Oracle Plugin: from n/a through 1.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/norse-runes-oracle/vulnerability/wordpress-norse-rune-oracle-plugin-1-4-1-csrf-to-stored-xss-vulnerability?_s_i
s/plugin/norse-runes-oracle/vulnerability/wordpress-norse-rune-oracle-plugin-1-4-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22557 State: PUBLISHED Published: 2025-01-07T14:57:14.550Z Last Updated: 2025-01-07T16:13:58.427Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WPMagic Products: News Publisher Autopilot Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPMagic News Publisher Autopilot allows Cross Site Request Forgery.This issue affects News Publisher Autopilot: from n/a through 2.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpm-news-api/vulnerability/wordpress-news-publisher-autopilot-plugin-2-1-4-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22558 State: PUBLISHED Published: 2025-01-07T14:57:13.931Z Last Updated: 2025-01-07T16:14:20.523Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Marcus C. J. Hartmann Products: mcjh button shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcus C. J. Hartmann mcjh button shortcode allows Stored XSS.This issue affects mcjh button shortcode: from n/a through 1.6.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mcjh-button-shortcode/vulnerability/wordpress-mcjh-button-shortcode-pl
https://patchstack.com/database/wordpress/plugin/mcjh-button-shortcode/vulnerability/wordpress-mcjh-button-shortcode-plugin-1-6-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22559 State: PUBLISHED Published: 2025-01-07T14:57:13.341Z Last Updated: 2025-01-07T16:20:37.341Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Mario Mansour and Geoff Peters Products: TubePress.NET Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mario Mansour and Geoff Peters TubePress.NET allows Cross Site Request Forgery.This issue affects TubePress.NET: from n/a through 4.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/tubepressnet/vulnerability/wordpress-tubepress-net-plugin-4-0-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22560 State: PUBLISHED Published: 2025-01-07T14:57:12.729Z Last Updated: 2025-01-07T16:21:18.612Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Saoshyant.1994 Products: Saoshyant Page Builder Problem Types: CWE-862 Description: Missing Authorization vulnerability in Saoshyant.1994 Saoshyant Page Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Saoshyant Page Builder: from n/a through 3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/saoshyant-page-builder/vulnerability/wordpress-saoshyant-page-builder-plugin-3-8-broken-acc
om/database/wordpress/plugin/saoshyant-page-builder/vulnerability/wordpress-saoshyant-page-builder-plugin-3-8-broken-access-control-vulnerability?_s_id=cve