Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-53161 State: REJECTED Published: N/A Last Updated: 2025-06-27T02:55:07.697Z Description: No description available.
CVE ID: CVE-2025-53162 State: REJECTED Published: N/A Last Updated: 2025-06-27T02:55:07.212Z Description: No description available.
CVE ID: CVE-2025-53163 State: REJECTED Published: N/A Last Updated: 2025-06-27T02:55:06.736Z Description: No description available.
CVE ID: CVE-2025-53164 State: REJECTED Published: N/A Last Updated: 2025-06-27T02:55:06.285Z Description: No description available.
CVE ID: CVE-2025-53165 State: REJECTED Published: N/A Last Updated: 2025-06-27T02:55:05.822Z Description: No description available.
CVE ID: CVE-2025-53166 State: REJECTED Published: N/A Last Updated: 2025-06-27T02:55:05.250Z Description: No description available.
CVE ID: CVE-2025-53167 State: PUBLISHED Published: 2025-07-07T01:44:46.221Z Last Updated: 2025-07-07T15:39:58.240Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-305 Description: Authentication vulnerability in the distributed collaboration framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53168 State: PUBLISHED Published: 2025-07-07T01:45:59.676Z Last Updated: 2025-07-07T15:39:38.089Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-275 Description: Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53169 State: PUBLISHED Published: 2025-07-07T01:57:48.736Z Last Updated: 2025-07-07T15:39:10.954Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: Others Description: Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53170 State: PUBLISHED Published: 2025-07-07T01:58:36.194Z Last Updated: 2025-07-07T15:38:06.928Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-476 Description: Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affect function stability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53171 State: PUBLISHED Published: 2025-07-07T02:02:19.567Z Last Updated: 2025-07-07T15:36:39.553Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-121 Description: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53172 State: PUBLISHED Published: 2025-07-07T02:04:28.409Z Last Updated: 2025-07-07T15:36:18.492Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-121 Description: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53173 State: PUBLISHED Published: 2025-07-07T02:05:21.927Z Last Updated: 2025-07-07T17:21:27.108Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-121 Description: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53174 State: PUBLISHED Published: 2025-07-07T02:06:19.985Z Last Updated: 2025-07-07T17:21:03.233Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-121 Description: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53175 State: PUBLISHED Published: 2025-07-07T02:07:24.125Z Last Updated: 2025-07-07T17:19:25.955Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-121 Description: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53176 State: PUBLISHED Published: 2025-07-07T02:08:18.336Z Last Updated: 2025-07-07T17:18:49.728Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-121 Description: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53177 State: PUBLISHED Published: 2025-07-07T02:12:38.484Z Last Updated: 2025-07-07T17:17:33.222Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-264 Description: Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53178 State: PUBLISHED Published: 2025-07-07T02:15:58.779Z Last Updated: 2025-07-07T15:35:30.229Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-264 Description: Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53179 State: PUBLISHED Published: 2025-07-07T02:16:57.298Z Last Updated: 2025-07-07T15:35:10.614Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-122 Description: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53180 State: PUBLISHED Published: 2025-07-07T02:20:25.769Z Last Updated: 2025-07-07T13:40:06.294Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-122 Description: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53181 State: PUBLISHED Published: 2025-07-07T02:22:58.603Z Last Updated: 2025-07-07T15:34:41.272Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-122 Description: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53182 State: PUBLISHED Published: 2025-07-07T02:24:35.282Z Last Updated: 2025-07-07T15:34:13.331Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-122 Description: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53183 State: PUBLISHED Published: 2025-07-07T02:29:55.469Z Last Updated: 2025-07-07T17:16:44.345Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-122 Description: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53184 State: PUBLISHED Published: 2025-07-07T02:35:07.235Z Last Updated: 2025-07-07T17:15:33.622Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-122 Description: Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53185 State: PUBLISHED Published: 2025-07-07T02:36:20.739Z Last Updated: 2025-07-07T17:52:24.400Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-416 Description: Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53186 State: PUBLISHED Published: 2025-07-07T02:38:07.820Z Last Updated: 2025-07-07T17:52:02.221Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-264 Description: Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2025-53187 State: PUBLISHED Published: 2025-08-11T17:50:01.166Z Last Updated: 2025-09-04T00:44:57.244Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Products: ASPECT Problem Types: CWE-288 Description: Due to an issue in configuration, code that was intended for debugging purposes was included in the market release of the ASPECT FW allowing an attacker to bypass authentication. This vulnerability may allow an attacker to change the system time, access files, and make function calls without prior authentication. This issue affects all versions of ASPECT prior to 3.08.04-s01 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
e affects all versions of ASPECT prior to 3.08.04-s01 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A4462&LanguageCode=en&DocumentPartId=pdf&Action=Launch
CVE ID: CVE-2025-53188 State: REJECTED Published: 2025-08-11T18:28:16.180Z Last Updated: 2025-08-21T10:27:30.640Z Description: No description available.
CVE ID: CVE-2025-53189 State: REJECTED Published: 2025-08-11T18:28:29.276Z Last Updated: 2025-08-21T10:27:46.930Z Description: No description available.
CVE ID: CVE-2025-53190 State: REJECTED Published: 2025-08-11T18:28:56.939Z Last Updated: 2025-08-21T10:28:07.479Z Description: No description available.
CVE ID: CVE-2025-53191 State: REJECTED Published: 2025-08-11T18:29:03.065Z Last Updated: 2025-08-21T10:28:28.154Z Description: No description available.
CVE ID: CVE-2025-53192 State: PUBLISHED Published: 2025-08-18T20:09:31.206Z Last Updated: 2025-11-04T21:11:44.989Z Vendors: Apache Software Foundation Products: Apache Commons OGNL Problem Types: CWE-146 Description: ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the API Ognl.getValue​, the OGNL engine parses and evaluates the provided expression with powerful capabilities, including accessing and invoking related methods, etc. Although OgnlRuntime attempts to restrict certain dangerous classes and methods (such as java.lang.Runtime) through a block
hough OgnlRuntime attempts to restrict certain dangerous classes and methods (such as java.lang.Runtime) through a blocklist, these restrictions are not comprehensive. Attackers may be able to bypass the restrictions by leveraging class objects that are not covered by the blocklist and potentially achieve arbitrary code execution. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References:
ger supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/2gj8tjl6vz949nnp3yxz3okm9xz2k7sp
CVE ID: CVE-2025-53193 State: PUBLISHED Published: 2025-06-27T13:20:57.894Z Last Updated: 2025-06-27T13:58:27.146Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Burst Statistics B.V. Products: Burst Statistics Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Burst Statistics B.V. Burst Statistics allows Cross Site Request Forgery. This issue affects Burst Statistics: from n/a through 2.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/burst-statistics/vulnerability/wordpress-burst-statistics-plugin-2-0-6-cross-site-request-forgery-csrf-vulnerability?_
n/burst-statistics/vulnerability/wordpress-burst-statistics-plugin-2-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53194 State: PUBLISHED Published: 2025-08-20T08:03:22.956Z Last Updated: 2025-08-20T17:44:48.734Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Crocoblock Products: JetEngine Problem Types: CWE-1336 Description: Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Crocoblock JetEngine allows Code Injection. This issue affects JetEngine: from n/a through 3.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/jet-engine/vulnerability/wordpress-jetengine-3-7-0-remote-code-execution-rce-vulnerability?_s_id=cve
CVE ID: CVE-2025-53195 State: PUBLISHED Published: 2025-08-20T08:03:22.441Z Last Updated: 2025-08-20T17:51:19.081Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Crocoblock Products: JetEngine Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/jet-engine/vulnerability/wordpress-jetengine-plugin-3-7-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53196 State: PUBLISHED Published: 2025-08-20T08:03:21.927Z Last Updated: 2025-08-20T17:51:40.912Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Crocoblock Products: JetEngine Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetEngine allows Retrieve Embedded Sensitive Data. This issue affects JetEngine: from n/a through 3.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/jet-engine/vulnerability/wordpress-jetengine-3-7-0-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-53197 State: PUBLISHED Published: 2025-06-27T13:20:58.672Z Last Updated: 2025-06-27T13:58:08.814Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: cookiebot Products: Cookiebot Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in cookiebot Cookiebot allows Cross Site Request Forgery. This issue affects Cookiebot: from n/a through 4.5.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cookiebot/vulnerability/wordpress-cookiebot-plugin-4-5-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53198 State: PUBLISHED Published: 2025-08-20T08:03:21.413Z Last Updated: 2025-08-20T17:52:01.541Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: favethemes Products: Houzez Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez allows PHP Local File Inclusion. This issue affects Houzez: from n/a through 4.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/houzez/vulnerability/wordpress-houzez-4-0-4-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53199 State: PUBLISHED Published: 2025-06-27T13:20:59.265Z Last Updated: 2025-06-27T13:57:48.176Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: HT Plugins Products: HT Slider For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Slider For Elementor allows DOM-Based XSS. This issue affects HT Slider For Elementor: from n/a through 1.6.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ht-slider-for-elementor/vulnerability/wordpress-ht-slider-for-elementor-plugin-1-6
chstack.com/database/wordpress/plugin/ht-slider-for-elementor/vulnerability/wordpress-ht-slider-for-elementor-plugin-1-6-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53200 State: PUBLISHED Published: 2025-06-27T13:20:59.856Z Last Updated: 2025-06-27T13:57:23.704Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: QuantumCloud Products: ChatBot Problem Types: CWE-862 Description: Missing Authorization vulnerability in QuantumCloud ChatBot allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ChatBot: from n/a through 6.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/chatbot/vulnerability/wordpress-chatbot-plugin-6-7-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53201 State: PUBLISHED Published: 2025-08-20T08:03:20.894Z Last Updated: 2025-08-20T17:52:27.121Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NooTheme Products: Jobmonster Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster allows Reflected XSS. This issue affects Jobmonster: from n/a through 4.7.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/noo-jobmonster/vulnerability/wordpress-jobmonster-4-7-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53202 State: PUBLISHED Published: 2025-06-27T13:21:00.534Z Last Updated: 2025-06-27T13:57:05.145Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: CyberChimps Products: Responsive Blocks Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyberChimps Responsive Blocks allows DOM-Based XSS. This issue affects Responsive Blocks: from n/a through 2.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/responsive-block-editor-addons/vulnerability/wordpress-responsive-blocks-plugin-2-0-6-cross-site-s
base/wordpress/plugin/responsive-block-editor-addons/vulnerability/wordpress-responsive-blocks-plugin-2-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53203 State: PUBLISHED Published: 2025-06-27T13:21:01.191Z Last Updated: 2025-06-27T13:56:39.075Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: EDGARROJAS Products: WooCommerce PDF Invoice Builder Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder allows Cross Site Request Forgery. This issue affects WooCommerce PDF Invoice Builder: from n/a through 1.2.148. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woo-pdf-invoice-builder/vulnerability/wordpress-woocommerce-pdf-invoice-builder-plugin-1-2-14
/database/wordpress/plugin/woo-pdf-invoice-builder/vulnerability/wordpress-woocommerce-pdf-invoice-builder-plugin-1-2-148-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53204 State: PUBLISHED Published: 2025-08-20T08:03:20.380Z Last Updated: 2025-08-20T15:37:47.239Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ovatheme Products: eventlist Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme eventlist allows PHP Local File Inclusion. This issue affects eventlist: from n/a through 1.9.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/eventlist/vulnerability/wordpress-eventlist-1-9-2-local-file-inclusion-vulnerability?_s_id=cve