Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-48329 State: PUBLISHED Published: 2025-06-06T11:48:58.610Z Last Updated: 2025-06-06T14:14:26.591Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Daman Jeet Products: Real Time Validation for Gravity Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daman Jeet Real Time Validation for Gravity Forms allows Reflected XSS.This issue affects Real Time Validation for Gravity Forms: from n/a through 1.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/real-time-validation-for-gravity-forms/v
DP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/real-time-validation-for-gravity-forms/vulnerability/wordpress-real-time-validation-for-gravity-forms-plugin-1-7-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-48330 State: PUBLISHED Published: 2025-11-06T15:53:48.806Z Last Updated: 2025-11-13T10:33:39.883Z Vendors: Daman Jeet Products: Real Time Validation for Gravity Forms Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows PHP Local File Inclusion.This issue affects Real Time Validation for Gravity Forms: from n/a through <= 1.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/real-time-validation-for-gravity-fo
ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/real-time-validation-for-gravity-forms/vulnerability/wordpress-real-time-validation-for-gravity-forms-1-7-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-48331 State: PUBLISHED Published: 2025-05-30T14:01:38.968Z Last Updated: 2025-05-30T22:00:37.013Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Vanquish Products: WooCommerce Orders & Customers Exporter Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in Vanquish WooCommerce Orders & Customers Exporter allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Orders & Customers Exporter: from n/a through 5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-orders-customers-exporter/vulnerability/wordpr
eferences: - https://patchstack.com/database/wordpress/plugin/woocommerce-orders-customers-exporter/vulnerability/wordpress-woocommerce-orders-customers-exporter-5-0-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-48332 State: PUBLISHED Published: 2025-08-14T10:34:23.230Z Last Updated: 2025-08-14T14:42:51.568Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: PublishPress Products: Gutenberg Blocks Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PublishPress Gutenberg Blocks allows PHP Local File Inclusion. This issue affects Gutenberg Blocks: from n/a through 3.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/advanced-gutenberg/vulnerability/wordpress-gutenberg-blocks-3-3-1-local
https://patchstack.com/database/wordpress/plugin/advanced-gutenberg/vulnerability/wordpress-gutenberg-blocks-3-3-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-48333 State: PUBLISHED Published: 2025-06-17T15:01:43.296Z Last Updated: 2025-06-23T16:09:20.503Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WPQuark Products: eForm - WordPress Form Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPQuark eForm - WordPress Form Builder allows Reflected XSS. This issue affects eForm - WordPress Form Builder: from n/a through n/a. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-fsqm-pro/vulnerability/wordpress-eform-wordpress-form-builder-4-19-1
https://patchstack.com/database/wordpress/plugin/wp-fsqm-pro/vulnerability/wordpress-eform-wordpress-form-builder-4-19-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-48334 State: PUBLISHED Published: 2025-05-30T08:42:56.425Z Last Updated: 2025-05-30T12:53:18.790Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: BinaryCarpenter Products: Woo Slider Pro Problem Types: CWE-862 Description: Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Slider Pro: from n/a through 1.12. Affected action "woo_slide_pro_delete_slider". Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woo-slider-pro-drag-drop-slider-builder-for-woocommerce/vulnerabi
es: - https://patchstack.com/database/wordpress/plugin/woo-slider-pro-drag-drop-slider-builder-for-woocommerce/vulnerability/wordpress-woo-slider-pro-1-12-arbitrary-content-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-48335 State: PUBLISHED Published: 2025-06-06T11:38:58.595Z Last Updated: 2025-06-06T15:04:28.501Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: CyberChimps Products: Responsive Plus Problem Types: CWE-862 Description: Missing Authorization vulnerability in CyberChimps Responsive Plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Responsive Plus: from n/a through 3.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/responsive-add-ons/vulnerability/wordpress-responsive-plus-plugin-3-2-0-broken-access-control-vulnerability?_s_id=cv
gin/responsive-add-ons/vulnerability/wordpress-responsive-plus-plugin-3-2-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-48336 State: PUBLISHED Published: 2025-05-29T18:54:34.068Z Last Updated: 2025-05-29T19:07:07.118Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ThimPress Products: Course Builder Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in ThimPress Course Builder allows Object Injection.This issue affects Course Builder: from n/a before 3.6.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/course-builder/vulnerability/wordpress-course-builder-3-6-6-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-48337 State: PUBLISHED Published: 2025-06-06T11:15:24.081Z Last Updated: 2025-06-06T15:08:22.444Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: QuickcabWP Products: QuickCab Problem Types: CWE-862 Description: Missing Authorization vulnerability in QuickcabWP QuickCab.This issue affects QuickCab: from n/a through 1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/quickcab/vulnerability/wordpress-quickcab-plugin-1-3-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-48338 State: PUBLISHED Published: 2025-10-22T14:32:07.858Z Last Updated: 2025-11-13T10:33:40.011Z Vendors: Kevon Adonis Products: WP Abstracts Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows PHP Local File Inclusion.This issue affects WP Abstracts: from n/a through <= 2.7.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-abstracts-manuscripts-manager/vulnerability/wordpress-wp-abstracts-plugin-2-7-4-local-file-inclusion-vulnerabili
ugin/wp-abstracts-manuscripts-manager/vulnerability/wordpress-wp-abstracts-plugin-2-7-4-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-48339 State: PUBLISHED Published: 2025-07-16T11:28:01.316Z Last Updated: 2025-07-16T14:11:44.852Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: activity-log.com Products: Profiler - What Slowing Down Your WP Problem Types: CWE-862 Description: Missing Authorization vulnerability in activity-log.com Profiler - What Slowing Down Your WP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Profiler - What Slowing Down Your WP: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/profiler-what-slowing-down/vulnerability/w
Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/profiler-what-slowing-down/vulnerability/wordpress-profiler-what-slowing-down-your-wp-1-0-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-48340 State: PUBLISHED Published: 2025-05-19T20:33:06.741Z Last Updated: 2025-05-19T21:18:27.147Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Danny Vink Products: User Profile Meta Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Danny Vink User Profile Meta Manager allows Privilege Escalation.This issue affects User Profile Meta Manager: from n/a through 1.02. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/user-profile-meta/vulnerability/wordpress-user-profile-meta-manager-plugin-1-02-csrf-to-privilege-escalation-vulnerabil
/user-profile-meta/vulnerability/wordpress-user-profile-meta-manager-plugin-1-02-csrf-to-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-48341 State: PUBLISHED Published: 2025-05-19T14:55:22.115Z Last Updated: 2025-05-19T15:15:46.570Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: 10Web Products: Form Maker by 10Web Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker by 10Web allows Stored XSS. This issue affects Form Maker by 10Web: from n/a through 1.15.33. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/form-maker/vulnerability/wordpress-form-maker-by-10web-1-15-33-cross-site-scripting-xss-vulnerability?_s_
rdpress/plugin/form-maker/vulnerability/wordpress-form-maker-by-10web-1-15-33-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-48342 State: PUBLISHED Published: 2025-05-19T14:55:22.665Z Last Updated: 2025-05-19T15:15:39.024Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: RedefiningTheWeb Products: Dynamic Pricing &amp; Discounts Lite for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in RedefiningTheWeb Dynamic Pricing &amp; Discounts Lite for WooCommerce allows Cross Site Request Forgery. This issue affects Dynamic Pricing &amp; Discounts Lite for WooCommerce: from n/a through 2.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woo-dynamic-pricing-
lyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woo-dynamic-pricing-discounts-lite/vulnerability/wordpress-dynamic-pricing-discounts-lite-for-woocommerce-2-0-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-48343 State: PUBLISHED Published: 2025-08-28T12:37:01.120Z Last Updated: 2025-08-28T18:58:16.820Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Aaron Axelsen Products: WPMU Ldap Authentication Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Aaron Axelsen WPMU Ldap Authentication allows Stored XSS. This issue affects WPMU Ldap Authentication: from n/a through 5.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpmuldap/vulnerability/wordpress-wpmu-ldap-authentication-plugin-5-0-1-cross-site-request-forgery-csrf-to-stored-xss-vulnerabili
/vulnerability/wordpress-wpmu-ldap-authentication-plugin-5-0-1-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-48344 State: PUBLISHED Published: 2025-05-19T14:55:23.169Z Last Updated: 2025-05-19T15:15:31.338Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: ed4becky Products: Rootspersona Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ed4becky Rootspersona allows Cross Site Request Forgery. This issue affects Rootspersona: from n/a through 3.7.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rootspersona/vulnerability/wordpress-rootspersona-3-7-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-48345 State: PUBLISHED Published: 2025-07-16T11:28:00.737Z Last Updated: 2025-07-16T13:38:14.699Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: arisoft Products: Contact Form 7 Editor Button Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arisoft Contact Form 7 Editor Button allows Reflected XSS. This issue affects Contact Form 7 Editor Button: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cf7-editor-button/vulnerability/wordpress-contact-form-7-editor-button-plug
s://patchstack.com/database/wordpress/plugin/cf7-editor-button/vulnerability/wordpress-contact-form-7-editor-button-plugin-1-0-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-48346 State: PUBLISHED Published: 2025-05-19T14:55:23.640Z Last Updated: 2025-05-19T15:15:23.419Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Etsy360 Products: Embed and Integrate Etsy Shop Problem Types: CWE-862 Description: Missing Authorization vulnerability in Etsy360 Embed and Integrate Etsy Shop allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Embed and Integrate Etsy Shop: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/embed-and-integrate-etsy-shop/vulnerability/wordpress-embed-and-integrate-etsy-shop-1-0-4
.com/database/wordpress/plugin/embed-and-integrate-etsy-shop/vulnerability/wordpress-embed-and-integrate-etsy-shop-1-0-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-48347 State: PUBLISHED Published: 2025-08-28T12:37:01.740Z Last Updated: 2025-08-28T19:07:53.950Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Vincent Mimoun-Prat Products: bxSlider integration for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vincent Mimoun-Prat bxSlider integration for WordPress allows Stored XSS. This issue affects bxSlider integration for WordPress: from n/a through 1.7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bxslider-integration/vulnerability
CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bxslider-integration/vulnerability/wordpress-bxslider-integration-for-wordpress-plugin-1-7-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-48348 State: PUBLISHED Published: 2025-08-28T12:37:02.392Z Last Updated: 2025-08-28T19:06:18.992Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: chandrashekharsahu Products: Site Offline Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in chandrashekharsahu Site Offline allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Site Offline: from n/a through 1.5.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/site-offline/vulnerability/wordpress-site-offline-plugin-1-5-7-broken-access-control-vulnerability?_s
e/wordpress/plugin/site-offline/vulnerability/wordpress-site-offline-plugin-1-5-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-48349 State: PUBLISHED Published: 2025-08-28T12:37:02.975Z Last Updated: 2025-08-28T17:44:22.797Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: origincode Products: Video Gallery – Vimeo and YouTube Gallery Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in origincode Video Gallery – Vimeo and YouTube Gallery allows Stored XSS. This issue affects Video Gallery – Vimeo and YouTube Gallery: from n/a through 1.1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smart-grid-gallery/vulnerabilit
- CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smart-grid-gallery/vulnerability/wordpress-video-gallery-vimeo-and-youtube-gallery-plugin-1-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-48350 State: PUBLISHED Published: 2025-08-28T12:37:03.559Z Last Updated: 2025-08-28T17:41:11.392Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Neuralabz LTD Products: AutoWP Problem Types: CWE-862 Description: Missing Authorization vulnerability in Neuralabz LTD AutoWP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AutoWP: from n/a through 2.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/autowp-ai-content-writer-rewriter/vulnerability/wordpress-autowp-plugin-2-2-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-48351 State: PUBLISHED Published: 2025-08-28T12:37:04.134Z Last Updated: 2025-08-28T17:39:54.388Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: PluginsPoint Products: Kento Splash Screen Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in PluginsPoint Kento Splash Screen allows Stored XSS. This issue affects Kento Splash Screen: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/kento-splash-screen/vulnerability/wordpress-kento-splash-screen-plugin-1-4-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-48352 State: PUBLISHED Published: 2025-08-28T12:37:04.772Z Last Updated: 2025-08-28T17:34:40.272Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: sitesearch-yandex Products: Yandex Site search pinger Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sitesearch-yandex Yandex Site search pinger allows Stored XSS. This issue affects Yandex Site search pinger: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/yandex-pinger/vulnerability/wordpress-yandex-site-search-pinger-plu
: - https://patchstack.com/database/wordpress/plugin/yandex-pinger/vulnerability/wordpress-yandex-site-search-pinger-plugin-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-48353 State: PUBLISHED Published: 2025-08-28T12:37:05.396Z Last Updated: 2025-08-28T17:33:17.401Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: dactum Products: Clickbank WordPress Plugin (Niche Storefront) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in dactum Clickbank WordPress Plugin (Niche Storefront) allows Stored XSS. This issue affects Clickbank WordPress Plugin (Niche Storefront): from n/a through 1.3.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/clickbank-niche-storefronts/vulnerability/wordpress-clickbank-wordpress-plugin-
patchstack.com/database/wordpress/plugin/clickbank-niche-storefronts/vulnerability/wordpress-clickbank-wordpress-plugin-niche-storefront-plugin-1-3-5-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-48354 State: PUBLISHED Published: 2025-08-28T12:37:05.974Z Last Updated: 2025-08-28T16:00:21.360Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Smart Widgets Products: Better Post &amp; Filter Widgets for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Smart Widgets Better Post &amp; Filter Widgets for Elementor allows Stored XSS. This issue affects Better Post &amp; Filter Widgets for Elementor: from n/a through 1.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bett
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/better-post-filter-widgets-for-elementor/vulnerability/wordpress-better-post-filter-widgets-for-elementor-plugin-1-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-48355 State: PUBLISHED Published: 2025-08-21T03:27:53.141Z Last Updated: 2025-08-21T15:57:02.963Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ProveSource LTD Products: ProveSource Social Proof Problem Types: CWE-497 Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ProveSource LTD ProveSource Social Proof allows Retrieve Embedded Sensitive Data.This issue affects ProveSource Social Proof: from n/a through 3.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/provesource/vulnerability/wordpress-provesource-social-proof
erences: - https://patchstack.com/database/wordpress/plugin/provesource/vulnerability/wordpress-provesource-social-proof-plugin-3-0-5-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-48356 State: PUBLISHED Published: 2025-08-28T12:37:06.561Z Last Updated: 2025-08-28T15:41:20.924Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Isra Products: Kanpress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Isra Kanpress allows Stored XSS. This issue affects Kanpress: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/kanpress/vulnerability/wordpress-kanpress-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-48357 State: PUBLISHED Published: 2025-08-28T12:37:07.117Z Last Updated: 2025-08-28T14:45:56.732Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Theme Century Products: Century ToolKit Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Theme Century Century ToolKit allows Cross Site Request Forgery. This issue affects Century ToolKit: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/century-toolkit/vulnerability/wordpress-century-toolkit-plugin-1-2-1-cross-site-request-forgery-csrf-to-arbitrary-plugin-activation-vulne
ulnerability/wordpress-century-toolkit-plugin-1-2-1-cross-site-request-forgery-csrf-to-arbitrary-plugin-activation-vulnerability?_s_id=cve