Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-25089 State: PUBLISHED Published: 2025-03-03T13:30:22.345Z Last Updated: 2025-03-03T17:37:26.049Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: appten Products: Image Rotator Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in appten Image Rotator allows Reflected XSS. This issue affects Image Rotator: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/appten-image-rotator/vulnerability/wordpress-easy-wp-tiles-plugin-1-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-25090 State: PUBLISHED Published: 2025-03-03T13:30:22.510Z Last Updated: 2025-06-02T18:40:03.803Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Dreamstime Products: Dreamstime Stock Photos Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dreamstime Dreamstime Stock Photos dreamstime-stock-photos allows Reflected XSS.This issue affects Dreamstime Stock Photos: from n/a through 4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dreamstime-stock-photos/vulnerability/wordpress-dreamstime-stoc
nces: - https://patchstack.com/database/wordpress/plugin/dreamstime-stock-photos/vulnerability/wordpress-dreamstime-stock-photos-plugin-4-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25091 State: PUBLISHED Published: 2025-02-07T10:11:25.772Z Last Updated: 2025-02-07T16:03:35.730Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: zackdesign Products: NextGen Cooliris Gallery Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zackdesign NextGen Cooliris Gallery allows Stored XSS. This issue affects NextGen Cooliris Gallery: from n/a through 0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/nextgen-cooliris-gallery/vulnerability/wordpress-nextgen-cooliris-gallery-plugin-0-7
stack.com/database/wordpress/plugin/nextgen-cooliris-gallery/vulnerability/wordpress-nextgen-cooliris-gallery-plugin-0-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25092 State: PUBLISHED Published: 2025-03-03T13:30:22.668Z Last Updated: 2025-03-03T17:37:12.549Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: gtlwpdev Products: All push notification for WP Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gtlwpdev All push notification for WP allows Reflected XSS. This issue affects All push notification for WP: from n/a through 1.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/all-push-notification/vulnerability/wordpress-easy-wp-tiles-plugin-1-cros
tps://patchstack.com/database/wordpress/plugin/all-push-notification/vulnerability/wordpress-easy-wp-tiles-plugin-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25093 State: PUBLISHED Published: 2025-02-07T10:11:35.933Z Last Updated: 2025-02-07T15:09:44.270Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:H) Vendors: paulswarthout Products: Child Themes Helper Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in paulswarthout Child Themes Helper allows Path Traversal. This issue affects Child Themes Helper: from n/a through 2.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/child-themes-helper/vulnerability/wordpress-child-themes-helper-plugin-2-2-7-csrf-to-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-25094 State: PUBLISHED Published: 2025-02-07T10:11:32.878Z Last Updated: 2025-02-07T15:54:32.979Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Amitythemes.com Products: Breaking News Ticker Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amitythemes.com Breaking News Ticker allows Stored XSS. This issue affects Breaking News Ticker: from n/a through 2.4.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/breaking-news-ticker/vulnerability/wordpress-breaking-news-ticker-plugin-2-4-4-cross
stack.com/database/wordpress/plugin/breaking-news-ticker/vulnerability/wordpress-breaking-news-ticker-plugin-2-4-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25095 State: PUBLISHED Published: 2025-02-07T10:11:35.322Z Last Updated: 2025-02-07T15:50:36.455Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: reverbnationdev Products: ReverbNation Widgets Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reverbnationdev ReverbNation Widgets allows Stored XSS. This issue affects ReverbNation Widgets: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/reverbnation-widgets/vulnerability/wordpress-reverbnation-widgets-plugin-2-1-cross-sit
ack.com/database/wordpress/plugin/reverbnation-widgets/vulnerability/wordpress-reverbnation-widgets-plugin-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25096 State: PUBLISHED Published: 2025-02-07T10:11:34.707Z Last Updated: 2025-02-07T15:51:12.679Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: titusbicknell Products: RSS in Page Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in titusbicknell RSS in Page allows Stored XSS. This issue affects RSS in Page: from n/a through 2.9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rss-in-page/vulnerability/wordpress-rss-in-page-plugin-2-9-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cv
ugin/rss-in-page/vulnerability/wordpress-rss-in-page-plugin-2-9-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25097 State: PUBLISHED Published: 2025-02-07T10:11:39.677Z Last Updated: 2025-02-07T14:56:14.567Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: kwiliarty Products: External Video For Everybody Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kwiliarty External Video For Everybody allows Stored XSS. This issue affects External Video For Everybody: from n/a through 2.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/external-video-for-everybody/vulnerability/wordpress-external-video-for-
ttps://patchstack.com/database/wordpress/plugin/external-video-for-everybody/vulnerability/wordpress-external-video-for-everybody-plugin-2-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25098 State: PUBLISHED Published: 2025-02-07T10:11:28.421Z Last Updated: 2025-02-07T15:54:03.084Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Zack Katz Products: Links in Captions Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zack Katz Links in Captions allows Stored XSS. This issue affects Links in Captions: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/links-in-captions/vulnerability/wordpress-links-in-captions-plugin-1-2-stored-cross-site-scripting-xss-vuln
press/plugin/links-in-captions/vulnerability/wordpress-links-in-captions-plugin-1-2-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25099 State: PUBLISHED Published: 2025-03-03T13:30:22.817Z Last Updated: 2025-03-03T17:37:06.410Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: accreteinfosolution Products: Appointment Buddy Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in accreteinfosolution Appointment Buddy Widget allows Reflected XSS. This issue affects Appointment Buddy Widget: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/appointment-buddy-online-appointment-booking-by-accrete/vulnerabi
es: - https://patchstack.com/database/wordpress/plugin/appointment-buddy-online-appointment-booking-by-accrete/vulnerability/wordpress-embed-rss-plugin-3-1-arbitrary-shortcode-execution-vulnerability?_s_id=cve
CVE ID: CVE-2025-25100 State: PUBLISHED Published: 2025-03-27T14:02:48.228Z Last Updated: 2025-03-28T17:00:44.985Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: victoracano Products: Cazamba Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in victoracano Cazamba allows Reflected XSS.This issue affects Cazamba: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cazamba/vulnerability/wordpress-cazamba-plugin-1-2-csrf-to-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25101 State: PUBLISHED Published: 2025-02-07T10:11:41.579Z Last Updated: 2025-02-07T14:54:16.816Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: MetricThemes Products: Munk Sites Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in MetricThemes Munk Sites allows Cross Site Request Forgery. This issue affects Munk Sites: from n/a through 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/munk-sites/vulnerability/wordpress-munk-sites-plugin-1-0-7-csrf-to-arbitrary-plugin-installation-vulnerability?_s_id=cve
CVE ID: CVE-2025-25102 State: PUBLISHED Published: 2025-03-03T13:30:22.968Z Last Updated: 2025-03-03T17:36:59.741Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Yahoo BOSS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Yahoo BOSS allows Reflected XSS. This issue affects Yahoo BOSS: from n/a through 0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/yahoo-boss/vulnerability/wordpress-yahoo-boss-plugin-0-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25103 State: PUBLISHED Published: 2025-02-07T10:11:42.848Z Last Updated: 2025-02-07T14:40:19.247Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: bnielsen Products: Indeed API Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in bnielsen Indeed API allows Cross Site Request Forgery. This issue affects Indeed API: from n/a through 0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/indeed-api/vulnerability/wordpress-indeed-api-plugin-0-5-csrf-to-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-25104 State: PUBLISHED Published: 2025-02-07T10:11:36.542Z Last Updated: 2025-02-07T15:06:06.610Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: mraliende Products: URL-Preview-Box Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in mraliende URL-Preview-Box allows Cross Site Request Forgery. This issue affects URL-Preview-Box: from n/a through 1.20. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/good-url-preview-box/vulnerability/wordpress-url-preview-box-plugin-1-20-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25105 State: PUBLISHED Published: 2025-02-07T10:11:42.221Z Last Updated: 2025-02-07T14:53:39.464Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: coffeestudios Products: Pop Up Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in coffeestudios Pop Up allows Stored XSS. This issue affects Pop Up: from n/a through 0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/popup-seo-optimized/vulnerability/wordpress-pop-up-plugin-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25106 State: PUBLISHED Published: 2025-02-07T10:11:40.281Z Last Updated: 2025-02-07T14:55:44.189Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: FancyWP Products: Starter Templates by FancyWP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in FancyWP Starter Templates by FancyWP allows Cross Site Request Forgery. This issue affects Starter Templates by FancyWP: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/starter-templates/vulnerability/wordpress-starter-templates-by-fancywp-plugin-2-0-0-csrf-to-arbitrary-plugin
ress/plugin/starter-templates/vulnerability/wordpress-starter-templates-by-fancywp-plugin-2-0-0-csrf-to-arbitrary-plugin-installation-vulnerability?_s_id=cve
CVE ID: CVE-2025-25107 State: PUBLISHED Published: 2025-02-07T10:11:40.883Z Last Updated: 2025-02-07T14:55:11.984Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: sainwp Products: OneStore Sites Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in sainwp OneStore Sites allows Cross Site Request Forgery. This issue affects OneStore Sites: from n/a through 0.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/onestore-sites/vulnerability/wordpress-onestore-sites-plugin-0-1-1-csrf-to-arbitrary-plugin-installation-vulnerability?_s_id=cve
CVE ID: CVE-2025-25108 State: PUBLISHED Published: 2025-03-03T13:30:23.129Z Last Updated: 2025-03-03T17:36:53.695Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: shalomworld Products: SW Plus Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shalomworld SW Plus allows Reflected XSS. This issue affects SW Plus: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/shalom-world-media-gallery/vulnerability/wordpress-sw-plus-plugin-2-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25109 State: PUBLISHED Published: 2025-03-03T13:30:23.305Z Last Updated: 2025-03-03T17:36:47.524Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NotFound Products: WP Vehicle Manager Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound WP Vehicle Manager allows PHP Local File Inclusion. This issue affects WP Vehicle Manager: from n/a through 3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/js-vehicle-manager/vulnerability/wordpress-embed-rss-plugin-3-1-arbitrary-s
s://patchstack.com/database/wordpress/plugin/js-vehicle-manager/vulnerability/wordpress-embed-rss-plugin-3-1-arbitrary-shortcode-execution-vulnerability-3?_s_id=cve
CVE ID: CVE-2025-25110 State: PUBLISHED Published: 2025-02-07T10:11:38.481Z Last Updated: 2025-02-07T14:57:18.383Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Metagauss Products: Event Kikfyre Problem Types: CWE-862 Description: Missing Authorization vulnerability in Metagauss Event Kikfyre allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Event Kikfyre: from n/a through 2.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/kikfyre-events-calendar-tickets/vulnerability/wordpress-event-kikfyre-plugin-2-1-8-broken-access-control-vulnerability?_s_id=
re-events-calendar-tickets/vulnerability/wordpress-event-kikfyre-plugin-2-1-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-25111 State: PUBLISHED Published: 2025-02-07T10:11:37.821Z Last Updated: 2025-02-07T14:57:49.025Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: WP Spell Check Products: WP Spell Check Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Spell Check WP Spell Check allows Cross Site Request Forgery. This issue affects WP Spell Check: from n/a through 9.21. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-spell-check/vulnerability/wordpress-wp-spell-check-plugin-9-21-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-25112 State: PUBLISHED Published: 2025-03-03T13:30:23.457Z Last Updated: 2025-03-03T17:36:40.822Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: NotFound Products: Social Links Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Social Links allows Blind SQL Injection. This issue affects Social Links: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/social-links/vulnerability/wordpress-links-in-captions-plugin-1-2-stored-cross-site-scripting-xss-vulnerability-2?_s_
in/social-links/vulnerability/wordpress-links-in-captions-plugin-1-2-stored-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-25113 State: PUBLISHED Published: 2025-03-03T13:30:23.619Z Last Updated: 2025-03-03T17:36:35.063Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Implied Cookie Consent Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Implied Cookie Consent allows Reflected XSS. This issue affects Implied Cookie Consent: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/implied-cookie-consent/vulnerability/wordpress-external-video-for-everybody-plugin-2-1-1-cros
/database/wordpress/plugin/implied-cookie-consent/vulnerability/wordpress-external-video-for-everybody-plugin-2-1-1-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-25114 State: PUBLISHED Published: 2025-03-03T13:30:23.767Z Last Updated: 2025-03-03T17:36:28.695Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ehabstar Products: User Role Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ehabstar User Role allows Reflected XSS. This issue affects User Role: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/user-roles/vulnerability/wordpress-easy-wp-tiles-plugin-1-cross-site-scripting-xss-vulnerability-6?_s_id=cve
CVE ID: CVE-2025-25115 State: PUBLISHED Published: 2025-03-03T13:30:23.922Z Last Updated: 2025-03-03T17:36:22.719Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Like dislike plus counter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Like dislike plus counter allows Stored XSS. This issue affects Like dislike plus counter: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/like-dislike-plus-counter/vulnerability/wordpress-easy-wp-tiles-plugin-1-cross-site-s
tack.com/database/wordpress/plugin/like-dislike-plus-counter/vulnerability/wordpress-easy-wp-tiles-plugin-1-cross-site-scripting-xss-vulnerability-5?_s_id=cve
CVE ID: CVE-2025-25116 State: PUBLISHED Published: 2025-02-07T10:11:44.672Z Last Updated: 2025-02-12T20:51:41.464Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: sudipto Products: Link to URL / Post Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in sudipto Link to URL / Post allows Blind SQL Injection. This issue affects Link to URL / Post: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/link-to-url-post/vulnerability/wordpress-link-to-url-post-plugin-1-3-sql-injection-vulnerability?_s_i
e/wordpress/plugin/link-to-url-post/vulnerability/wordpress-link-to-url-post-plugin-1-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-25117 State: PUBLISHED Published: 2025-02-07T10:11:44.045Z Last Updated: 2025-02-12T19:41:06.737Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Alex Polonski Products: Smart Countdown FX Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Polonski Smart Countdown FX allows Stored XSS. This issue affects Smart Countdown FX: from n/a through 1.5.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smart-countdown-fx/vulnerability/wordpress-smart-countdown-fx-plugin-1-5-5-cross-site-scriptin
database/wordpress/plugin/smart-countdown-fx/vulnerability/wordpress-smart-countdown-fx-plugin-1-5-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25118 State: PUBLISHED Published: 2025-03-03T13:30:24.095Z Last Updated: 2025-03-03T17:36:16.647Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Top Bar – PopUps – by WPOptin Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Top Bar – PopUps – by WPOptin allows Reflected XSS. This issue affects Top Bar – PopUps – by WPOptin: from n/a through 2.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpoptin/vulnerability/wordpress-easy-wp-tiles-plugin-1-cross-site-scri
https://patchstack.com/database/wordpress/plugin/wpoptin/vulnerability/wordpress-easy-wp-tiles-plugin-1-cross-site-scripting-xss-vulnerability-7?_s_id=cve
CVE ID: CVE-2025-25119 State: PUBLISHED Published: 2025-03-03T13:30:24.277Z Last Updated: 2025-03-03T17:36:10.842Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Woocommerce osCommerce Sync Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Woocommerce osCommerce Sync allows Reflected XSS. This issue affects Woocommerce osCommerce Sync: from n/a through 2.0.20. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woo-oscommerce-sync/vulnerability/wordpress-easy-wp-tiles-plugin-1-cross-si
s://patchstack.com/database/wordpress/plugin/woo-oscommerce-sync/vulnerability/wordpress-easy-wp-tiles-plugin-1-cross-site-scripting-xss-vulnerability-4?_s_id=cve