Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-31566 State: PUBLISHED Published: 2025-03-31T12:55:19.202Z Last Updated: 2025-03-31T13:55:17.204Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: riosisgroup Products: Rio Video Gallery Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in riosisgroup Rio Video Gallery allows Stored XSS. This issue affects Rio Video Gallery: from n/a through 2.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rio-video-gallery/vulnerability/wordpress-rio-video-gallery-plugin-2-3-6-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31567 State: PUBLISHED Published: 2025-03-31T12:55:19.760Z Last Updated: 2025-03-31T13:54:49.084Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Themesflat Products: Themesflat Addons For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesflat Themesflat Addons For Elementor allows Stored XSS. This issue affects Themesflat Addons For Elementor: from n/a through 2.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/themesflat-addons-for-elementor/vulnerability/wordpress-theme
rences: - https://patchstack.com/database/wordpress/plugin/themesflat-addons-for-elementor/vulnerability/wordpress-themesflat-addons-for-elementor-plugin-2-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31568 State: PUBLISHED Published: 2025-04-01T20:58:13.443Z Last Updated: 2025-04-02T13:19:54.424Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: wiredmindshelp Products: LeadLab by wiredminds Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wiredmindshelp LeadLab by wiredminds allows Reflected XSS. This issue affects LeadLab by wiredminds: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wiredminds-leadlab/vulnerability/wordpress-leadlab-by-wiredminds-plugin-1-3-cross-si
stack.com/database/wordpress/plugin/wiredminds-leadlab/vulnerability/wordpress-leadlab-by-wiredminds-plugin-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31569 State: PUBLISHED Published: 2025-03-31T12:55:20.295Z Last Updated: 2025-03-31T13:54:22.974Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: wp-buy Products: wordpress related Posts with thumbnails Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in wp-buy wordpress related Posts with thumbnails allows Stored XSS. This issue affects wordpress related Posts with thumbnails: from n/a through 3.0.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/related-posts-list-grid-and-slider-all-in-one/vulnerability/wordpress-wordpress-related-posts-w
atabase/wordpress/plugin/related-posts-list-grid-and-slider-all-in-one/vulnerability/wordpress-wordpress-related-posts-with-thumbnails-plugin-3-0-0-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31570 State: PUBLISHED Published: 2025-03-31T12:55:20.827Z Last Updated: 2025-03-31T15:25:36.845Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: wp-buy Products: Related Posts Widget with Thumbnails Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in wp-buy Related Posts Widget with Thumbnails allows Stored XSS. This issue affects Related Posts Widget with Thumbnails: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/advanced-css3-related-posts-widget/vulnerability/wordpress-related-posts-widget-with-thumbnails-plugin-1-2-c
ress/plugin/advanced-css3-related-posts-widget/vulnerability/wordpress-related-posts-widget-with-thumbnails-plugin-1-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31571 State: PUBLISHED Published: 2025-04-01T20:58:13.606Z Last Updated: 2025-04-02T13:16:42.067Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Cynob IT Consultancy Products: The Logo Slider Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cynob IT Consultancy The Logo Slider allows Reflected XSS. This issue affects The Logo Slider: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/the-logo-slider/vulnerability/wordpress-the-logo-slider-plugin-1-0-0-reflected-cross-sit
k.com/database/wordpress/plugin/the-logo-slider/vulnerability/wordpress-the-logo-slider-plugin-1-0-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31572 State: PUBLISHED Published: 2025-03-31T12:55:21.426Z Last Updated: 2025-03-31T15:23:48.271Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: v20202020 Products: Multi Days Events and Multi Events in One Day Calendar Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in v20202020 Multi Days Events and Multi Events in One Day Calendar allows Cross Site Request Forgery. This issue affects Multi Days Events and Multi Events in One Day Calendar: from n/a through 1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dragon-calendar-free-version
es: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dragon-calendar-free-version/vulnerability/wordpress-multi-days-events-and-multi-events-in-one-day-calendar-plugin-1-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31573 State: PUBLISHED Published: 2025-04-03T13:27:11.286Z Last Updated: 2025-04-03T15:07:14.168Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Pepro Dev. Group Products: PeproDev CF7 Database Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev. Group PeproDev CF7 Database allows Stored XSS. This issue affects PeproDev CF7 Database: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pepro-cf7-database/vulnerability/wordpress-peprodev-cf7-database-plugin-2-0-0-cro
tchstack.com/database/wordpress/plugin/pepro-cf7-database/vulnerability/wordpress-peprodev-cf7-database-plugin-2-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31574 State: PUBLISHED Published: 2025-03-31T12:55:22.112Z Last Updated: 2025-03-31T15:21:39.998Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: SoftHopper Products: Custom Content Scrollbar Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SoftHopper Custom Content Scrollbar allows Stored XSS. This issue affects Custom Content Scrollbar: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-content-scrollbar/vulnerability/wordpress-custom-content-scrollbar-plugin-1-3
stack.com/database/wordpress/plugin/custom-content-scrollbar/vulnerability/wordpress-custom-content-scrollbar-plugin-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31575 State: PUBLISHED Published: 2025-03-31T12:55:22.643Z Last Updated: 2025-03-31T15:21:17.507Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Vasilis Triantafyllou Products: Flag Icons Problem Types: CWE-80 Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Vasilis Triantafyllou Flag Icons allows Stored XSS. This issue affects Flag Icons: from n/a through 2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/language-icons-flags-switcher/vulnerability/wordpress-flag-icons-plugin-2-2-cross-site-scripting-xss-vulnerabil
s/plugin/language-icons-flags-switcher/vulnerability/wordpress-flag-icons-plugin-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31576 State: PUBLISHED Published: 2025-03-31T12:55:23.196Z Last Updated: 2025-03-31T16:22:44.465Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Gagan Deep Singh Products: PostmarkApp Email Integrator Problem Types: CWE-862 Description: Missing Authorization vulnerability in Gagan Deep Singh PostmarkApp Email Integrator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PostmarkApp Email Integrator: from n/a through 2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/postmarkapp-email-integrator/vulnerability/wordpress-postmarkapp-ema
- https://patchstack.com/database/wordpress/plugin/postmarkapp-email-integrator/vulnerability/wordpress-postmarkapp-email-integrator-plugin-2-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31577 State: PUBLISHED Published: 2025-03-31T12:55:23.719Z Last Updated: 2025-03-31T14:09:27.239Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: appointify Products: Appointify Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in appointify Appointify allows Upload a Web Shell to a Web Server. This issue affects Appointify: from n/a through 1.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/appointify/vulnerability/wordpress-appointify-plugin-1-0-8-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-31578 State: PUBLISHED Published: 2025-04-01T20:58:13.818Z Last Updated: 2025-04-02T13:15:47.312Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Wisdomlogix Solutions Pvt. Ltd. Products: Fonts Manager | Custom Fonts Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wisdomlogix Solutions Pvt. Ltd. Fonts Manager | Custom Fonts allows Reflected XSS. This issue affects Fonts Manager | Custom Fonts: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fonts-manager-custom-fonts/vu
s: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fonts-manager-custom-fonts/vulnerability/wordpress-fonts-manager-custom-fonts-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31579 State: PUBLISHED Published: 2025-04-01T20:58:14.026Z Last Updated: 2025-04-10T14:40:22.258Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: EXEIdeas International Products: WP AutoKeyword Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in EXEIdeas International WP AutoKeyword allows SQL Injection. This issue affects WP AutoKeyword: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-autokeyword/vulnerability/wordpress-wp-autokeyword-plugin-1-0-sql-injection-vulner
tack.com/database/wordpress/plugin/wp-autokeyword/vulnerability/wordpress-wp-autokeyword-plugin-1-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31580 State: PUBLISHED Published: 2025-04-01T20:58:14.203Z Last Updated: 2025-04-03T12:54:16.112Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Anzar Ahmed Products: Ni WooCommerce Product Enquiry Problem Types: CWE-862 Description: Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Product Enquiry allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Ni WooCommerce Product Enquiry: from n/a through 4.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ni-woocommerce-product-enquiry/vulnerability/wordpress-ni-woocommerce-product-en
atchstack.com/database/wordpress/plugin/ni-woocommerce-product-enquiry/vulnerability/wordpress-ni-woocommerce-product-enquiry-plugin-4-1-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31581 State: PUBLISHED Published: 2025-04-03T13:27:11.440Z Last Updated: 2025-04-03T15:07:00.633Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Sandeep Kumar Products: WP Video Playlist Problem Types: CWE-862 Description: Missing Authorization vulnerability in Sandeep Kumar WP Video Playlist allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Video Playlist: from n/a through 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-video-playlist/vulnerability/wordpress-wp-video-playlist-plugin-1-1-2-settings-change-vulnerability?_s
rdpress/plugin/wp-video-playlist/vulnerability/wordpress-wp-video-playlist-plugin-1-1-2-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-31582 State: PUBLISHED Published: 2025-04-03T13:27:11.813Z Last Updated: 2025-04-03T14:22:39.569Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ashish Ajani Products: Contact Form vCard Generator Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashish Ajani Contact Form vCard Generator allows Stored XSS. This issue affects Contact Form vCard Generator: from n/a through 2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/contact-form-vcard-generator/vulnerability/wordpress-contact-form-vcar
https://patchstack.com/database/wordpress/plugin/contact-form-vcard-generator/vulnerability/wordpress-contact-form-vcard-generator-plugin-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31583 State: PUBLISHED Published: 2025-03-31T12:55:24.284Z Last Updated: 2025-03-31T16:22:11.684Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ashish Ajani Products: WP Copy Media URL Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ashish Ajani WP Copy Media URL allows Stored XSS. This issue affects WP Copy Media URL: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-copy-media-url/vulnerability/wordpress-wp-copy-media-url-plugin-2-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31584 State: PUBLISHED Published: 2025-03-31T12:55:24.876Z Last Updated: 2025-03-31T15:39:28.419Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: elfsight Products: Elfsight Testimonials Slider Problem Types: CWE-862 Description: Missing Authorization vulnerability in elfsight Elfsight Testimonials Slider allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elfsight Testimonials Slider: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/elfsight-testimonials-slider/vulnerability/wordpress-elfsight-testimonials-slider-
chstack.com/database/wordpress/plugin/elfsight-testimonials-slider/vulnerability/wordpress-elfsight-testimonials-slider-plugin-1-0-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31585 State: PUBLISHED Published: 2025-03-31T12:55:25.448Z Last Updated: 2025-03-31T15:39:02.494Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: leadfox Products: Leadfox for WordPress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in leadfox Leadfox for WordPress allows Cross Site Request Forgery. This issue affects Leadfox for WordPress: from n/a through 2.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/leadfox/vulnerability/wordpress-leadfox-for-wordpress-plugin-2-1-8-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31586 State: PUBLISHED Published: 2025-03-31T12:55:25.974Z Last Updated: 2025-03-31T15:38:31.617Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: GhozyLab Products: Gallery – Photo Albums Plugin Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Gallery – Photo Albums Plugin allows Stored XSS. This issue affects Gallery – Photo Albums Plugin: from n/a through 1.3.170. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-media-gallery/vulnerability/wordpress-gallery-photo-albums-plugi
- https://patchstack.com/database/wordpress/plugin/easy-media-gallery/vulnerability/wordpress-gallery-photo-albums-plugin-plugin-1-3-170-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31587 State: PUBLISHED Published: 2025-03-31T12:55:26.547Z Last Updated: 2025-03-31T15:37:58.955Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: elfsight Products: Elfsight Testimonials Slider Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in elfsight Elfsight Testimonials Slider allows Stored XSS. This issue affects Elfsight Testimonials Slider: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/elfsight-testimonials-slider/vulnerability/wordpress-elfsight-testimonials
ps://patchstack.com/database/wordpress/plugin/elfsight-testimonials-slider/vulnerability/wordpress-elfsight-testimonials-slider-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31588 State: PUBLISHED Published: 2025-03-31T12:55:27.107Z Last Updated: 2025-03-31T14:08:41.734Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: elfsight Products: Elfsight Testimonials Slider Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in elfsight Elfsight Testimonials Slider allows Cross Site Request Forgery. This issue affects Elfsight Testimonials Slider: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/elfsight-testimonials-slider/vulnerability/wordpress-elfsight-testimonials-slider-plugin-1-0-1-cross-site-re
ress/plugin/elfsight-testimonials-slider/vulnerability/wordpress-elfsight-testimonials-slider-plugin-1-0-1-cross-site-request-forgery-csrf-to-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-31589 State: PUBLISHED Published: 2025-03-31T12:55:27.675Z Last Updated: 2025-03-31T13:59:46.698Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Kibru Demeke Products: Ethiopian Calendar Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kibru Demeke Ethiopian Calendar allows Stored XSS. This issue affects Ethiopian Calendar: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ethiopian-calendar/vulnerability/wordpress-ethiopian-calendar-plugin-1-1-1-cross-site-scripting-
tabase/wordpress/plugin/ethiopian-calendar/vulnerability/wordpress-ethiopian-calendar-plugin-1-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31590 State: PUBLISHED Published: 2025-03-31T12:55:28.209Z Last Updated: 2025-03-31T13:57:25.428Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Denra.com Products: WP Date and Time Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Denra.com WP Date and Time Shortcode allows Stored XSS. This issue affects WP Date and Time Shortcode: from n/a through 2.6.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-date-and-time-shortcode/vulnerability/wordpress-wp-date-and-time-shortcode-
/patchstack.com/database/wordpress/plugin/wp-date-and-time-shortcode/vulnerability/wordpress-wp-date-and-time-shortcode-plugin-2-6-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31591 State: PUBLISHED Published: 2025-03-31T12:55:28.738Z Last Updated: 2025-03-31T13:56:49.296Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: promoz73 Products: Exit Popup Free Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in promoz73 Exit Popup Free allows Stored XSS. This issue affects Exit Popup Free: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/exit-popup-free/vulnerability/wordpress-exit-popup-free-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31592 State: PUBLISHED Published: 2025-03-31T12:55:29.263Z Last Updated: 2025-03-31T13:53:45.190Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Paolo Melchiorre Products: Send E-mail Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paolo Melchiorre Send E-mail allows Stored XSS. This issue affects Send E-mail: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/send-e-mail/vulnerability/wordpress-send-e-mail-plugin-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31593 State: PUBLISHED Published: 2025-03-31T12:55:29.784Z Last Updated: 2025-03-31T15:00:46.591Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: OpenMenu Products: OpenMenu Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OpenMenu OpenMenu allows Stored XSS. This issue affects OpenMenu: from n/a through 3.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/open-menu/vulnerability/wordpress-openmenu-plugin-3-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31594 State: PUBLISHED Published: 2025-04-01T20:58:14.390Z Last Updated: 2025-04-10T14:38:45.617Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WPglob Products: Auto scroll for reading Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPglob Auto scroll for reading allows Reflected XSS. This issue affects Auto scroll for reading: from n/a through 1.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/auto-scroll-for-reading/vulnerability/wordpress-auto-scroll-for-reading-plugin-1-1-4-reflect
m/database/wordpress/plugin/auto-scroll-for-reading/vulnerability/wordpress-auto-scroll-for-reading-plugin-1-1-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve