Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-23855 State: PUBLISHED Published: 2025-04-17T15:48:28.229Z Last Updated: 2025-04-17T18:15:01.803Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: fyljp Products: SpiderDisplay Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fyljp SpiderDisplay allows Reflected XSS. This issue affects SpiderDisplay: from n/a through 1.9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/spiderdisplay/vulnerability/wordpress-spiderdisplay-plugin-1-9-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23856 State: PUBLISHED Published: 2025-01-16T20:07:22.800Z Last Updated: 2025-01-17T19:06:21.458Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Alessandro Staniscia Products: Simple Vertical Timeline Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alessandro Staniscia Simple Vertical Timeline allows DOM-Based XSS.This issue affects Simple Vertical Timeline: from n/a through 0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-vertical-timeline/vulnerability/wordpress-simple-vertic
ences: - https://patchstack.com/database/wordpress/plugin/simple-vertical-timeline/vulnerability/wordpress-simple-vertical-timeline-plugin-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23857 State: PUBLISHED Published: 2025-02-14T12:44:33.569Z Last Updated: 2025-02-14T14:27:43.253Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Essential WP Real Estate Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Essential WP Real Estate allows Reflected XSS. This issue affects Essential WP Real Estate: from n/a through 1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/essential-wp-real-estate/vulnerability/wordpress-essential-wp-real-estate-plugin-1-1-
tack.com/database/wordpress/plugin/essential-wp-real-estate/vulnerability/wordpress-essential-wp-real-estate-plugin-1-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23858 State: PUBLISHED Published: 2025-04-17T15:48:27.630Z Last Updated: 2025-04-17T18:15:16.283Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Hiren Patel Products: Custom Users Order Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hiren Patel Custom Users Order allows Reflected XSS. This issue affects Custom Users Order: from n/a through 4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-users-order/vulnerability/wordpress-custom-users-order-plugin-4-2-reflected-cross-site-scrip
ase/wordpress/plugin/custom-users-order/vulnerability/wordpress-custom-users-order-plugin-4-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23859 State: PUBLISHED Published: 2025-01-16T20:07:25.424Z Last Updated: 2025-01-17T19:05:28.778Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Joshua Wieczorek Products: Daily Proverb Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joshua Wieczorek Daily Proverb allows Stored XSS.This issue affects Daily Proverb: from n/a through 2.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/daily-proverb/vulnerability/wordpress-daily-proverb-plugin-2-0-3-cross-site-scripting-xss-vulnerability?
ordpress/plugin/daily-proverb/vulnerability/wordpress-daily-proverb-plugin-2-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23860 State: PUBLISHED Published: 2025-01-16T20:07:24.756Z Last Updated: 2025-01-17T19:05:46.047Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Eyouth { rob.panes } Products: Charity-thermometer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eyouth { rob.panes } Charity-thermometer allows Stored XSS.This issue affects Charity-thermometer: from n/a through 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/charitydonation-thermometer/vulnerability/wordpress-charity-thermometer-plugin
/patchstack.com/database/wordpress/plugin/charitydonation-thermometer/vulnerability/wordpress-charity-thermometer-plugin-1-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23861 State: PUBLISHED Published: 2025-01-16T20:07:23.444Z Last Updated: 2025-01-17T19:06:09.112Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Katz Web Services, Inc. Products: Debt Calculator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Katz Web Services, Inc. Debt Calculator allows Cross Site Request Forgery.This issue affects Debt Calculator: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/debt-calculator/vulnerability/wordpress-debt-calculator-plugin-1-0-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23862 State: PUBLISHED Published: 2025-01-16T20:07:24.067Z Last Updated: 2025-01-17T19:05:57.822Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: SzMake Products: Contact Form 7 Anti Spambot Problem Types: CWE-862 Description: Missing Authorization vulnerability in SzMake Contact Form 7 Anti Spambot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form 7 Anti Spambot: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/contact-form-7-anti-spambot/vulnerability/wordpress-contact-form-7-anti-spambot-plugin-1-0
com/database/wordpress/plugin/contact-form-7-anti-spambot/vulnerability/wordpress-contact-form-7-anti-spambot-plugin-1-0-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-23863 State: PUBLISHED Published: 2025-01-16T20:07:27.969Z Last Updated: 2025-01-17T19:04:37.634Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Eiji ‘Sabaoh’ Yamada Products: Rollover Tab Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eiji ‘Sabaoh’ Yamada Rollover Tab allows Stored XSS.This issue affects Rollover Tab: from n/a through 1.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rollover-tab/vulnerability/wordpress-rollover-tab-plugin-1-3-2-stored-cross-site-scripting-xss-vuln
ase/wordpress/plugin/rollover-tab/vulnerability/wordpress-rollover-tab-plugin-1-3-2-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23864 State: PUBLISHED Published: 2025-01-16T20:07:30.528Z Last Updated: 2025-01-17T19:03:40.911Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Code Snippets (Luke America) Products: WCS QR Code Generator Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Code Snippets (Luke America) WCS QR Code Generator allows Stored XSS.This issue affects WCS QR Code Generator: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wcs-qr-code-generator/vulnerability/wordpress-wcs-qr
ent: References: - https://patchstack.com/database/wordpress/plugin/wcs-qr-code-generator/vulnerability/wordpress-wcs-qr-code-generator-plugin-1-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23865 State: PUBLISHED Published: 2025-01-16T20:07:28.625Z Last Updated: 2025-01-17T19:04:23.091Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Pressfore Products: Winning Portfolio Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pressfore Winning Portfolio allows Stored XSS.This issue affects Winning Portfolio: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/winning-portfolio/vulnerability/wordpress-winning-portfolio-plugin-1-1-stored-cross-site-scripting-xss-vulne
ress/plugin/winning-portfolio/vulnerability/wordpress-winning-portfolio-plugin-1-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23866 State: PUBLISHED Published: 2025-01-22T14:29:22.673Z Last Updated: 2025-01-22T19:45:53.450Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: EU DSGVO Helper Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound EU DSGVO Helper allows Reflected XSS. This issue affects EU DSGVO Helper: from n/a through 1.0.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dsgvo/vulnerability/wordpress-eu-dsgvo-helper-plugin-1-0-6-1-reflected-cross-site-scripting-xss-vulnerability?
ss/plugin/dsgvo/vulnerability/wordpress-eu-dsgvo-helper-plugin-1-0-6-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23867 State: PUBLISHED Published: 2025-01-22T14:29:22.848Z Last Updated: 2025-01-22T19:45:37.465Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: WordPress File Search Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WordPress File Search allows Reflected XSS. This issue affects WordPress File Search: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpfilesearch/vulnerability/wordpress-wordpress-file-search-plugin-1-2-reflected-cross-site-scrip
tabase/wordpress/plugin/wpfilesearch/vulnerability/wordpress-wordpress-file-search-plugin-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23868 State: PUBLISHED Published: 2025-01-16T20:07:29.910Z Last Updated: 2025-01-17T19:03:55.326Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Markus Liebelt Products: Chess Tempo Viewer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markus Liebelt Chess Tempo Viewer allows Stored XSS.This issue affects Chess Tempo Viewer: from n/a through 0.9.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/chesstempoviewer/vulnerability/wordpress-chess-tempo-viewer-plugin-0-9-5-stored-cross-site-sc
/database/wordpress/plugin/chesstempoviewer/vulnerability/wordpress-chess-tempo-viewer-plugin-0-9-5-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23869 State: PUBLISHED Published: 2025-01-16T20:07:26.034Z Last Updated: 2025-01-17T19:05:15.196Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Shibu Lijack a.k.a CyberJack Products: CJ Custom Content Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Shibu Lijack a.k.a CyberJack CJ Custom Content allows Stored XSS.This issue affects CJ Custom Content: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cj-custom-content/vulnerability/wordpress-cj-custom-content-plugin-2-0-csrf-to-cross-site-scripting-vulnerability?_s_id=cv
-custom-content/vulnerability/wordpress-cj-custom-content-plugin-2-0-csrf-to-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2025-23870 State: PUBLISHED Published: 2025-01-16T20:07:27.326Z Last Updated: 2025-01-17T19:04:49.800Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Robert Nicholson Products: Copyright Safeguard Footer Notice Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Robert Nicholson Copyright Safeguard Footer Notice allows Stored XSS.This issue affects Copyright Safeguard Footer Notice: from n/a through 3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/copyright-safeguard-footer-notice/vulnerability/wordpress-copyright-safeguard-footer-notice-plugin
base/wordpress/plugin/copyright-safeguard-footer-notice/vulnerability/wordpress-copyright-safeguard-footer-notice-plugin-3-0-csrf-to-stored-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-23871 State: PUBLISHED Published: 2025-01-16T20:07:29.281Z Last Updated: 2025-01-17T19:04:09.291Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Bas Matthee Products: LSD Google Maps Embedder Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Bas Matthee LSD Google Maps Embedder allows Cross Site Request Forgery.This issue affects LSD Google Maps Embedder: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/lsd-google-maps-embedder/vulnerability/wordpress-lsd-google-maps-embedder-plugin-1-1-csrf-to-stored-xss-vulnerability?_
/lsd-google-maps-embedder/vulnerability/wordpress-lsd-google-maps-embedder-plugin-1-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23872 State: PUBLISHED Published: 2025-01-16T20:07:31.138Z Last Updated: 2025-01-17T19:03:28.768Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: PayForm Products: PayForm Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in PayForm PayForm allows Stored XSS.This issue affects PayForm: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/payform/vulnerability/wordpress-payform-plugin-2-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23873 State: PUBLISHED Published: 2025-01-16T20:07:32.373Z Last Updated: 2025-01-17T19:03:05.609Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Anshi Solutions Products: Category D3 Tree Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anshi Solutions Category D3 Tree allows Stored XSS.This issue affects Category D3 Tree: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/category-d3-tree/vulnerability/wordpress-category-d3-tree-plugin-1-1-stored-cross-site-scripting-xs
ase/wordpress/plugin/category-d3-tree/vulnerability/wordpress-category-d3-tree-plugin-1-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23874 State: PUBLISHED Published: 2025-01-22T14:29:22.990Z Last Updated: 2025-01-22T19:45:22.537Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: WP Block Pack Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Block Pack allows Reflected XSS. This issue affects WP Block Pack: from n/a through 1.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-block-pack/vulnerability/wordpress-wp-block-pack-plugin-1-1-6-reflected-cross-site-scripting-xss-vulnerability?_s_i
n/wp-block-pack/vulnerability/wordpress-wp-block-pack-plugin-1-1-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23875 State: PUBLISHED Published: 2025-01-16T20:07:35.012Z Last Updated: 2025-01-17T19:02:17.578Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Tim Ridgway Products: Better Protected Pages Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Tim Ridgway Better Protected Pages allows Stored XSS.This issue affects Better Protected Pages: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/better-protected-pages/vulnerability/wordpress-better-protected-pages-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-23876 State: PUBLISHED Published: 2025-01-16T20:07:36.289Z Last Updated: 2025-01-17T19:01:52.871Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Jens Remus Products: WP krpano Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jens Remus WP krpano allows Stored XSS.This issue affects WP krpano: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-krpano/vulnerability/wordpress-wp-krpano-plugin-1-2-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23877 State: PUBLISHED Published: 2025-01-16T20:07:31.746Z Last Updated: 2025-01-17T19:03:16.151Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: nitethemes Products: Nite Shortcodes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nitethemes Nite Shortcodes allows Stored XSS.This issue affects Nite Shortcodes: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/nite-shortcodes/vulnerability/wordpress-nite-shortcodes-plugin-1-0-stored-cross-site-scripting-xss-vulnerability
/plugin/nite-shortcodes/vulnerability/wordpress-nite-shortcodes-plugin-1-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23878 State: PUBLISHED Published: 2025-01-16T20:07:33.100Z Last Updated: 2025-01-17T19:02:53.700Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Scott Reilly Products: Post-to-Post Links Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Reilly Post-to-Post Links allows Stored XSS.This issue affects Post-to-Post Links: from n/a through 4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-post-to-post-links/vulnerability/wordpress-post-to-post-links-plugin-4-2-cross-site-scripting-
ase/wordpress/plugin/easy-post-to-post-links/vulnerability/wordpress-post-to-post-links-plugin-4-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23879 State: PUBLISHED Published: 2025-03-03T13:30:20.182Z Last Updated: 2025-05-12T15:27:56.614Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: PillarDev Products: Easy Automatic Newsletter Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PillarDev Easy Automatic Newsletter Lite allows Reflected XSS. This issue affects Easy Automatic Newsletter Lite: from n/a through 3.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-automatic-newsletter/vulnerability/wordpress-easy-automatic-
es: - https://patchstack.com/database/wordpress/plugin/easy-automatic-newsletter/vulnerability/wordpress-easy-automatic-newsletter-lite-plugin-3-2-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23880 State: PUBLISHED Published: 2025-01-16T20:07:33.769Z Last Updated: 2025-01-17T19:02:41.483Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: anmari Products: amr personalise Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in anmari amr personalise allows Cross Site Request Forgery.This issue affects amr personalise: from n/a through 2.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/amr-personalise/vulnerability/wordpress-amr-personalise-plugin-2-10-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23881 State: PUBLISHED Published: 2025-03-03T13:30:20.349Z Last Updated: 2025-05-12T15:28:23.191Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: LJ Custom Menu Links Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound LJ Custom Menu Links allows Reflected XSS. This issue affects LJ Custom Menu Links: from n/a through 2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/lj-custom-menu-links/vulnerability/wordpress-lj-custom-menu-links-plugin-2-5-reflected-cross-site-s
ase/wordpress/plugin/lj-custom-menu-links/vulnerability/wordpress-lj-custom-menu-links-plugin-2-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23882 State: PUBLISHED Published: 2025-01-22T14:32:16.833Z Last Updated: 2025-01-22T15:07:49.269Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: WP Download Codes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Download Codes allows Reflected XSS. This issue affects WP Download Codes: from n/a through 2.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-download-codes/vulnerability/wordpress-wp-download-codes-plugin-2-5-4-reflected-cross-site-scripting-xs
dpress/plugin/wp-download-codes/vulnerability/wordpress-wp-download-codes-plugin-2-5-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23883 State: PUBLISHED Published: 2025-03-03T13:30:20.521Z Last Updated: 2025-05-12T15:28:47.858Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Stray Random Quotes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Stray Random Quotes allows Reflected XSS. This issue affects Stray Random Quotes: from n/a through 1.9.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/stray-quotes/vulnerability/wordpress-stray-random-quotes-plugin-1-9-9-reflected-cross-site-scripting
se/wordpress/plugin/stray-quotes/vulnerability/wordpress-stray-random-quotes-plugin-1-9-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23884 State: PUBLISHED Published: 2025-01-16T20:07:40.841Z Last Updated: 2025-01-17T21:51:47.811Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Chris Roberts Products: Annie Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Chris Roberts Annie allows Cross Site Request Forgery.This issue affects Annie: from n/a through 2.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/annie/vulnerability/wordpress-annie-plugin-2-1-1-csrf-to-stored-xss-vulnerability?_s_id=cve