Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-53308 State: PUBLISHED Published: 2025-06-27T13:21:32.265Z Last Updated: 2025-06-27T17:28:03.789Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: gopi_plus Products: Image Slider With Description Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in gopi_plus Image Slider With Description allows Stored XSS. This issue affects Image Slider With Description: from n/a through 9.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/image-slider-with-description/vulnerability/wordpress-image-slider-with-description-plugin-9-2-cross-site-request-forgery-c
ge-slider-with-description/vulnerability/wordpress-image-slider-with-description-plugin-9-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53309 State: PUBLISHED Published: 2025-06-27T13:21:32.847Z Last Updated: 2025-06-27T17:27:54.927Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ZealousWeb Products: Accept Stripe Payments Using Contact Form 7 Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in ZealousWeb Accept Stripe Payments Using Contact Form 7 allows Retrieve Embedded Sensitive Data. This issue affects Accept Stripe Payments Using Contact Form 7: from n/a through 3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/accept-stripe-payments-using-contact-fo
ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/accept-stripe-payments-using-contact-form-7/vulnerability/wordpress-accept-stripe-payments-using-contact-form-7-plugin-3-0-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-53310 State: PUBLISHED Published: 2025-06-27T13:21:33.433Z Last Updated: 2025-06-27T17:27:48.401Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Funnnny Products: HidePost Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Funnnny HidePost allows Reflected XSS. This issue affects HidePost: from n/a through 2.3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hidepost/vulnerability/wordpress-hidepost-plugin-2-3-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53311 State: PUBLISHED Published: 2025-06-27T13:21:34.036Z Last Updated: 2025-06-27T17:27:41.457Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Amol Nirmala Waman Products: Navayan Subscribe Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Amol Nirmala Waman Navayan Subscribe allows Stored XSS. This issue affects Navayan Subscribe: from n/a through 1.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/navayan-subscribe/vulnerability/wordpress-navayan-subscribe-plugin-1-13-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53312 State: PUBLISHED Published: 2025-06-27T13:21:34.658Z Last Updated: 2025-06-27T17:27:34.766Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Looks Awesome Products: OnionBuzz Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Looks Awesome OnionBuzz allows Stored XSS. This issue affects OnionBuzz: from n/a through 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/onionbuzz-viral-quiz/vulnerability/wordpress-onionbuzz-plugin-1-0-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53313 State: PUBLISHED Published: 2025-06-27T13:21:35.249Z Last Updated: 2025-06-27T17:27:28.885Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: plumwd Products: Twitch TV Embed Suite Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in plumwd Twitch TV Embed Suite allows Stored XSS. This issue affects Twitch TV Embed Suite: from n/a through 2.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/twitch-tv-embed-suite/vulnerability/wordpress-twitch-tv-embed-suite-plugin-2-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53314 State: PUBLISHED Published: 2025-06-27T13:21:35.871Z Last Updated: 2025-06-27T17:27:21.479Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L) Vendors: sh1zen Products: WP Optimizer Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in sh1zen WP Optimizer allows SQL Injection. This issue affects WP Optimizer: from n/a through 2.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-optimizer/vulnerability/wordpress-wp-optimizer-plugin-2-3-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53315 State: PUBLISHED Published: 2025-06-27T13:21:36.449Z Last Updated: 2025-06-27T17:27:15.136Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: alanft Products: Relocate Upload Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in alanft Relocate Upload allows Stored XSS. This issue affects Relocate Upload: from n/a through 0.24.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/relocate-upload/vulnerability/wordpress-relocate-upload-plugin-0-24-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53316 State: PUBLISHED Published: 2025-11-06T15:54:04.995Z Last Updated: 2025-11-13T10:33:42.308Z Vendors: Shahjahan Jewel Products: WP GDPR Cookie Consent Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel WP GDPR Cookie Consent wp-gdpr-cookie-consent allows Stored XSS.This issue affects WP GDPR Cookie Consent: from n/a through <= 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-gdpr-cookie-consent/vulnerability/wordpress-wp-gdpr-cookie-consent-plugin-1-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53317 State: PUBLISHED Published: 2025-06-27T13:21:37.070Z Last Updated: 2025-06-27T17:27:09.041Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: AcmeeDesign Products: WPShapere Lite Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in AcmeeDesign WPShapere Lite allows Stored XSS. This issue affects WPShapere Lite: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpshapere-lite/vulnerability/wordpress-wpshapere-lite-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53318 State: PUBLISHED Published: 2025-06-27T13:21:37.649Z Last Updated: 2025-06-27T13:45:55.231Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L) Vendors: WPManiax Products: WP DB Booster Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPManiax WP DB Booster allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP DB Booster: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-db-booster/vulnerability/wordpress-wp-db-booster-plugin-1-0-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53319 State: PUBLISHED Published: 2025-08-20T08:03:15.362Z Last Updated: 2025-08-20T14:17:08.395Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Raptive Products: Raptive Ads Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Raptive Raptive Ads allows Reflected XSS. This issue affects Raptive Ads: from n/a through 3.8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/adthrive-ads/vulnerability/wordpress-raptive-ads-plugin-3-8-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53320 State: PUBLISHED Published: 2025-06-27T13:21:38.269Z Last Updated: 2025-06-27T13:45:39.606Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Wp Enhanced Products: Free Downloads EDD Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wp Enhanced Free Downloads EDD allows DOM-Based XSS. This issue affects Free Downloads EDD: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/free-downloads-edd/vulnerability/wordpress-free-downloads-edd-plugin-1-0-4-cross-site-scripting
atabase/wordpress/plugin/free-downloads-edd/vulnerability/wordpress-free-downloads-edd-plugin-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53321 State: PUBLISHED Published: 2025-06-27T13:21:38.849Z Last Updated: 2025-06-27T13:45:23.101Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Raise The Money Products: Raise The Money Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Raise The Money Raise The Money allows DOM-Based XSS. This issue affects Raise The Money: from n/a through 5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/raise-the-money/vulnerability/wordpress-raise-the-money-plugin-5-2-cross-site-scripting-xss-vulner
base/wordpress/plugin/raise-the-money/vulnerability/wordpress-raise-the-money-plugin-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53322 State: PUBLISHED Published: 2025-06-27T13:21:39.459Z Last Updated: 2025-06-27T13:45:07.759Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ZealousWeb Products: Accept Authorize.NET Payments Using Contact Form 7 Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in ZealousWeb Accept Authorize.NET Payments Using Contact Form 7 allows Retrieve Embedded Sensitive Data. This issue affects Accept Authorize.NET Payments Using Contact Form 7: from n/a through 2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/accept-authorize-n
nalyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/accept-authorize-net-payments-using-contact-form-7/vulnerability/wordpress-accept-authorize-net-payments-using-contact-form-7-plugin-2-5-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-53323 State: PUBLISHED Published: 2025-06-27T13:21:40.027Z Last Updated: 2025-06-27T17:27:00.907Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: danbriapps Products: Pre-Publish Post Checklist Problem Types: CWE-862 Description: Missing Authorization vulnerability in danbriapps Pre-Publish Post Checklist allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pre-Publish Post Checklist: from n/a through 3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pre-publish-post-checklist/vulnerability/wordpress-pre-publish-post-checklist-plugin-3
ack.com/database/wordpress/plugin/pre-publish-post-checklist/vulnerability/wordpress-pre-publish-post-checklist-plugin-3-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53324 State: PUBLISHED Published: 2025-11-06T15:54:05.737Z Last Updated: 2025-11-13T10:33:42.318Z Vendors: CodeYatri Products: Gutenify Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeYatri Gutenify gutenify allows Stored XSS.This issue affects Gutenify: from n/a through <= 1.5.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/gutenify/vulnerability/wordpress-gutenify-plugin-1-5-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53325 State: PUBLISHED Published: 2025-06-27T13:21:40.682Z Last Updated: 2025-06-27T17:26:53.880Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Dilip kumar Products: Beauty Contact Popup Form Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dilip kumar Beauty Contact Popup Form allows Stored XSS. This issue affects Beauty Contact Popup Form: from n/a through 6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/beauty-contact-popup-form/vulnerability/wordpress-beauty-contact-popup-form-plu
patchstack.com/database/wordpress/plugin/beauty-contact-popup-form/vulnerability/wordpress-beauty-contact-popup-form-plugin-6-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53326 State: PUBLISHED Published: 2025-08-28T12:37:27.073Z Last Updated: 2025-08-28T14:32:42.714Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CodeYatri Products: Gutenify Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodeYatri Gutenify allows PHP Local File Inclusion. This issue affects Gutenify: from n/a through 1.5.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gutenify/vulnerability/wordpress-gutenify-plugin-1-5-6-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53327 State: PUBLISHED Published: 2025-06-27T13:21:41.244Z Last Updated: 2025-06-27T17:26:47.287Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: rui_mashita Products: Aioseo Multibyte Descriptions Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in rui_mashita Aioseo Multibyte Descriptions allows Cross Site Request Forgery. This issue affects Aioseo Multibyte Descriptions: from n/a through 0.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/aioseo-multibyte-descriptions/vulnerability/wordpress-aioseo-multibyte-descriptions-plugin-0-0-6-cr
ase/wordpress/plugin/aioseo-multibyte-descriptions/vulnerability/wordpress-aioseo-multibyte-descriptions-plugin-0-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53328 State: PUBLISHED Published: 2025-08-28T12:37:27.714Z Last Updated: 2025-08-28T14:17:58.806Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Assaf Parag Products: Poll, Survey & Quiz Maker Plugin by Opinion Stage Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Assaf Parag Poll, Survey & Quiz Maker Plugin by Opinion Stage allows PHP Local File Inclusion. This issue affects Poll, Survey & Quiz Maker Plugin by Opinion Stage: from n/a through 19.11.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.co
Stage: from n/a through 19.11.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/social-polls-by-opinionstage/vulnerability/wordpress-poll-survey-quiz-maker-plugin-by-opinion-stage-plugin-19-11-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53329 State: PUBLISHED Published: 2025-06-27T13:21:41.831Z Last Updated: 2025-06-27T17:26:40.201Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: szajenw Products: Społecznościowa 6 PL 2013 Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in szajenw Społecznościowa 6 PL 2013 allows Stored XSS. This issue affects Społecznościowa 6 PL 2013: from n/a through 2.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/spolecznosciowa-6-pl-2013/vulnerability/wordpress-spolecznosciowa-6-pl-2013-plugin-2-0-6-cross-site-request-forgery-csrf-vulnerability?_s
-pl-2013/vulnerability/wordpress-spolecznosciowa-6-pl-2013-plugin-2-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53330 State: PUBLISHED Published: 2025-08-14T18:21:59.485Z Last Updated: 2025-08-14T20:04:58.980Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WpEstate Products: WP Rentals Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpEstate WP Rentals allows Stored XSS. This issue affects WP Rentals: from n/a through 3.13.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/wprentals/vulnerability/wordpress-wp-rentals-theme-theme-3-13-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53331 State: PUBLISHED Published: 2025-06-27T13:21:42.417Z Last Updated: 2025-06-27T17:26:34.034Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: samcharrington Products: RSS Digest Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in samcharrington RSS Digest allows Stored XSS. This issue affects RSS Digest: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rss-digest/vulnerability/wordpress-rss-digest-plugin-1-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53332 State: PUBLISHED Published: 2025-06-27T13:21:43.053Z Last Updated: 2025-06-27T17:26:27.393Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ethoseo Products: Track Everything Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ethoseo Track Everything allows Stored XSS. This issue affects Track Everything: from n/a through 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/track-everything/vulnerability/wordpress-track-everything-plugin-2-0-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53334 State: PUBLISHED Published: 2025-08-28T12:37:28.356Z Last Updated: 2025-08-28T14:08:25.132Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TieLabs Products: Jannah Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah allows PHP Local File Inclusion. This issue affects Jannah: from n/a through 7.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/jannah/vulnerability/wordpress-jannah-theme-7-4-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53336 State: PUBLISHED Published: 2025-06-27T13:21:43.714Z Last Updated: 2025-06-27T17:26:20.612Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: abditsori Products: My Resume Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in abditsori My Resume Builder allows Stored XSS. This issue affects My Resume Builder: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/my-resume-builder/vulnerability/wordpress-my-resume-builder-plugin-1-0-3-cross-site-scripting-xss-vulnera
rdpress/plugin/my-resume-builder/vulnerability/wordpress-my-resume-builder-plugin-1-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53337 State: PUBLISHED Published: 2025-08-28T12:37:28.948Z Last Updated: 2025-08-28T14:05:45.641Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Ashan Perera Products: LifePress Problem Types: CWE-862 Description: Missing Authorization vulnerability in Ashan Perera LifePress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects LifePress: from n/a through 2.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/lifepress/vulnerability/wordpress-lifepress-plugin-2-1-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53338 State: PUBLISHED Published: 2025-06-27T13:21:44.386Z Last Updated: 2025-06-27T17:26:14.172Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: dor Products: re.place Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in dor re.place allows Stored XSS. This issue affects re.place: from n/a through 0.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/replace/vulnerability/wordpress-re-place-plugin-0-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53339 State: PUBLISHED Published: 2025-06-27T13:21:45.198Z Last Updated: 2025-06-27T17:26:08.593Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: devnex Products: Devnex Addons For Elementor Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in devnex Devnex Addons For Elementor allows PHP Local File Inclusion. This issue affects Devnex Addons For Elementor: from n/a through 1.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/devnex-addons-for-elementor/vulnerability/wordpres
hment: References: - https://patchstack.com/database/wordpress/plugin/devnex-addons-for-elementor/vulnerability/wordpress-devnex-addons-for-elementor-plugin-1-0-9-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53340 State: PUBLISHED Published: 2025-09-09T16:25:34.207Z Last Updated: 2025-09-09T18:40:41.412Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: awesomesupport Products: Awesome Support Problem Types: CWE-862 Description: Missing Authorization vulnerability in awesomesupport Awesome Support. This issue affects Awesome Support: from n/a through 6.3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/awesome-support/vulnerability/wordpress-awesome-support-plugin-plugin-6-3-4-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-53341 State: PUBLISHED Published: 2025-08-14T18:21:57.476Z Last Updated: 2025-08-14T20:04:36.676Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Themovation Products: Stratus Problem Types: CWE-862 Description: Missing Authorization vulnerability in Themovation Stratus allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Stratus: from n/a through 4.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/stratus/vulnerability/wordpress-stratus-theme-theme-4-2-5-broken-access-control-vulnerability?_s_id=cve