Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-23766 State: PUBLISHED Published: 2025-02-14T12:44:31.971Z Last Updated: 2025-02-14T14:47:18.963Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: ashamil Products: OPSI Israel Domestic Shipments Problem Types: CWE-862 Description: Missing Authorization vulnerability in ashamil OPSI Israel Domestic Shipments allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects OPSI Israel Domestic Shipments: from n/a through 2.6.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woo-ups-pickup/vulnerability/wordpress-opsi-israel-domestic-shipments-plugin-2
/patchstack.com/database/wordpress/plugin/woo-ups-pickup/vulnerability/wordpress-opsi-israel-domestic-shipments-plugin-2-6-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-23767 State: PUBLISHED Published: 2025-01-16T20:06:52.919Z Last Updated: 2025-02-12T20:31:22.479Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Revolutionart Products: Marmoset Viewer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Revolutionart Marmoset Viewer allows Stored XSS.This issue affects Marmoset Viewer: from n/a through 1.9.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/marmoset-viewer/vulnerability/wordpress-marmoset-viewer-plugin-1-9-3-stored-cross-site-scripting-xss-vul
ordpress/plugin/marmoset-viewer/vulnerability/wordpress-marmoset-viewer-plugin-1-9-3-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23768 State: PUBLISHED Published: 2025-01-22T14:32:10.808Z Last Updated: 2025-01-22T15:09:34.469Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: InFunding Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound InFunding allows Reflected XSS. This issue affects InFunding: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/infunding/vulnerability/wordpress-infunding-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23769 State: PUBLISHED Published: 2025-01-22T14:29:21.178Z Last Updated: 2025-01-23T16:55:43.829Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Content Mirror Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Content Mirror allows Reflected XSS. This issue affects Content Mirror: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/content-mirror/vulnerability/wordpress-content-mirror-plugin-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_
in/content-mirror/vulnerability/wordpress-content-mirror-plugin-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23770 State: PUBLISHED Published: 2025-01-22T14:29:21.360Z Last Updated: 2025-01-23T16:54:48.797Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Fast Tube Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Fast Tube allows Reflected XSS. This issue affects Fast Tube: from n/a through 2.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fast-tube/vulnerability/wordpress-fast-tube-plugin-2-3-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23771 State: PUBLISHED Published: 2025-02-14T12:44:32.120Z Last Updated: 2025-02-14T14:41:42.682Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Murali Products: Push Notification for Post and BuddyPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in Murali Push Notification for Post and BuddyPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Push Notification for Post and BuddyPress: from n/a through 2.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/push-notification-for-post-and-buddypress/vulner
ichment: References: - https://patchstack.com/database/wordpress/plugin/push-notification-for-post-and-buddypress/vulnerability/wordpress-push-notification-for-post-and-buddypress-plugin-2-10-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-23772 State: PUBLISHED Published: 2025-01-16T20:06:56.263Z Last Updated: 2025-01-17T19:10:48.419Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Eugenio Petullà Products: imaGenius Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eugenio Petullà imaGenius allows Stored XSS.This issue affects imaGenius: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/imagenius/vulnerability/wordpress-imagenius-plugin-1-7-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23773 State: PUBLISHED Published: 2025-04-17T15:48:29.605Z Last Updated: 2025-04-17T18:14:34.829Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: mingocommerce Products: Delete All Posts Problem Types: CWE-862 Description: Missing Authorization vulnerability in mingocommerce Delete All Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Delete All Posts: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/delele-all/vulnerability/wordpress-delete-all-posts-plugin-1-1-1-broken-access-control-vulnerability?_s_id=c
ress/plugin/delele-all/vulnerability/wordpress-delete-all-posts-plugin-1-1-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-23774 State: PUBLISHED Published: 2025-01-22T14:29:21.519Z Last Updated: 2025-01-23T16:50:38.768Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: NotFound Products: WPDB to Sql Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in NotFound WPDB to Sql allows Retrieve Embedded Sensitive Data. This issue affects WPDB to Sql: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpdb-to-sql/vulnerability/wordpress-wpdb-to-sql-plugin-1-2-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-23775 State: PUBLISHED Published: 2025-01-16T20:06:55.554Z Last Updated: 2025-01-17T19:10:58.781Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WWP Products: GMAPS for WPBakery Page Builder Free Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WWP GMAPS for WPBakery Page Builder Free allows Stored XSS.This issue affects GMAPS for WPBakery Page Builder Free: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gmaps-for-visual-composer-free/vulnerability/wordpress-gmaps-fo
nces: - https://patchstack.com/database/wordpress/plugin/gmaps-for-visual-composer-free/vulnerability/wordpress-gmaps-for-wpbakery-page-builder-free-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23776 State: PUBLISHED Published: 2025-01-16T20:06:54.288Z Last Updated: 2025-01-17T19:11:21.728Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Thorn Technologies LLC Products: Cache Sniper for Nginx Problem Types: CWE-862 Description: Missing Authorization vulnerability in Thorn Technologies LLC Cache Sniper for Nginx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cache Sniper for Nginx: from n/a through 1.0.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/snipe-nginx-cache/vulnerability/wordpress-cache-sniper-for-nginx-plugin
https://patchstack.com/database/wordpress/plugin/snipe-nginx-cache/vulnerability/wordpress-cache-sniper-for-nginx-plugin-1-0-4-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-23777 State: PUBLISHED Published: 2025-01-16T20:06:56.921Z Last Updated: 2025-01-17T19:10:35.555Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Willows Consulting Ltd. Products: GDPR Personal Data Reports Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Willows Consulting Ltd. GDPR Personal Data Reports allows Stored XSS.This issue affects GDPR Personal Data Reports: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gdpr-personal-data-reports/vulnerability/wordpress-
ment: References: - https://patchstack.com/database/wordpress/plugin/gdpr-personal-data-reports/vulnerability/wordpress-gdpr-personal-data-reports-plugin-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23778 State: PUBLISHED Published: 2025-01-16T20:06:58.220Z Last Updated: 2025-01-17T19:10:11.653Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Pravin Durugkar Products: User Sync ActiveCampaign Problem Types: CWE-862 Description: Missing Authorization vulnerability in Pravin Durugkar User Sync ActiveCampaign allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Sync ActiveCampaign: from n/a through 1.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/registered-user-sync-activecampaign/vulnerability/wordpress-user-sync-activecampa
tchstack.com/database/wordpress/plugin/registered-user-sync-activecampaign/vulnerability/wordpress-user-sync-activecampaign-plugin-1-3-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-23779 State: PUBLISHED Published: 2025-01-16T20:06:57.549Z Last Updated: 2025-01-17T19:10:21.808Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: web-mv.de Products: ResAds Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in web-mv.de ResAds allows SQL Injection.This issue affects ResAds: from n/a through 2.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/resads/vulnerability/wordpress-resads-plugin-2-0-5-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-23780 State: PUBLISHED Published: 2025-01-16T20:06:59.639Z Last Updated: 2025-01-17T19:09:46.368Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: AlphaBPO Products: Easy Code Snippets Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AlphaBPO Easy Code Snippets allows SQL Injection.This issue affects Easy Code Snippets: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-code-snippets/vulnerability/wordpress-easy-code-snippets-plugin-1-0-2-sql-injection-vulnerability?_
ordpress/plugin/easy-code-snippets/vulnerability/wordpress-easy-code-snippets-plugin-1-0-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-23781 State: PUBLISHED Published: 2025-01-22T14:29:21.705Z Last Updated: 2025-01-23T16:38:26.900Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: NotFound Products: WM Options Import Export Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in NotFound WM Options Import Export allows Retrieve Embedded Sensitive Data. This issue affects WM Options Import Export: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wm-options-import-export/vulnerability/wordpress-wm-options-import-export-plugin-1-0-1-sensitive-dat
se/wordpress/plugin/wm-options-import-export/vulnerability/wordpress-wm-options-import-export-plugin-1-0-1-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-23782 State: PUBLISHED Published: 2025-04-17T15:48:28.870Z Last Updated: 2025-04-17T18:14:48.325Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: TotalSuite Products: TotalContest Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TotalSuite TotalContest Lite allows Reflected XSS. This issue affects TotalContest Lite: from n/a through 2.8.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/totalcontest-lite/vulnerability/wordpress-totalcontest-lite-plugin-2-8-1-reflected-cross-site-scriptin
/wordpress/plugin/totalcontest-lite/vulnerability/wordpress-totalcontest-lite-plugin-2-8-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23783 State: PUBLISHED Published: 2025-01-16T20:06:53.624Z Last Updated: 2025-02-12T20:31:22.154Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: carrotbits Products: Greek Namedays Widget From Eortologio.Net Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in carrotbits Greek Namedays Widget From Eortologio.Net allows Stored XSS.This issue affects Greek Namedays Widget From Eortologio.Net: from n/a through 20191113. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/greek-namedays-widget/vulnera
s: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/greek-namedays-widget/vulnerability/wordpress-greek-namedays-widget-plugin-20191113-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23784 State: PUBLISHED Published: 2025-01-22T14:29:21.894Z Last Updated: 2025-01-23T16:31:05.809Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: NotFound Products: Contact Form 7 Round Robin Lead Distribution Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Contact Form 7 Round Robin Lead Distribution allows SQL Injection. This issue affects Contact Form 7 Round Robin Lead Distribution: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/contact-form-7-round-robi
Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/contact-form-7-round-robin-lead-distribution/vulnerability/wordpress-contact-form-7-round-robin-lead-distribution-plugin-1-2-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-23785 State: PUBLISHED Published: 2025-01-16T20:06:58.936Z Last Updated: 2025-01-17T19:09:58.053Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: August Infotech Products: AI Responsive Gallery Album Problem Types: CWE-862 Description: Missing Authorization vulnerability in August Infotech AI Responsive Gallery Album allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Responsive Gallery Album: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ai-responsive-gallery-album/vulnerability/wordpress-ai-responsive-gallery-
ps://patchstack.com/database/wordpress/plugin/ai-responsive-gallery-album/vulnerability/wordpress-ai-responsive-gallery-album-plugin-1-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-23786 State: PUBLISHED Published: 2025-02-14T12:44:32.275Z Last Updated: 2025-02-14T14:40:15.351Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: DuoGeek Products: Email to Download Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DuoGeek Email to Download allows Reflected XSS. This issue affects Email to Download: from n/a through 3.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/email-to-download/vulnerability/wordpress-email-to-download-plugin-3-1-0-reflected-cross-site-scripting-xss-
ress/plugin/email-to-download/vulnerability/wordpress-email-to-download-plugin-3-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23787 State: PUBLISHED Published: 2025-02-14T12:44:32.495Z Last Updated: 2025-02-14T14:38:56.386Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Easy Bet Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Easy Bet allows Reflected XSS. This issue affects Easy Bet: from n/a through 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-bet/vulnerability/wordpress-easy-bet-plugin-1-0-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23788 State: PUBLISHED Published: 2025-02-14T12:44:32.660Z Last Updated: 2025-02-14T15:50:34.376Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Easy Filter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Easy Filter allows Reflected XSS. This issue affects Easy Filter: from n/a through 1.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-filter/vulnerability/wordpress-easy-filter-plugin-1-10-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23789 State: PUBLISHED Published: 2025-02-14T12:44:32.832Z Last Updated: 2025-02-14T15:49:08.893Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: tahminajannat Products: URL Shortener | Conversion Tracking | AB Testing | WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tahminajannat URL Shortener | Conversion Tracking | AB Testing | WooCommerce allows Reflected XSS. This issue affects URL Shortener | Conversion Tracking | AB Testing | WooCommerce: from n/a through 9.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pa
sting | WooCommerce: from n/a through 9.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-broken-link-checker/vulnerability/wordpress-url-shortener-woocommerce-plugin-9-0-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23790 State: PUBLISHED Published: 2025-02-14T12:44:33.004Z Last Updated: 2025-02-14T15:42:43.839Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: wassereimer Products: Easy Code Placement Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wassereimer Easy Code Placement allows Reflected XSS. This issue affects Easy Code Placement: from n/a through 18.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-code-placement/vulnerability/wordpress-easy-code-placement-plugin-18-11-reflected-cross-s
database/wordpress/plugin/easy-code-placement/vulnerability/wordpress-easy-code-placement-plugin-18-11-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23791 State: PUBLISHED Published: 2025-01-16T20:07:01.133Z Last Updated: 2025-01-17T19:09:22.915Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: RocaPress Products: Horizontal Line Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RocaPress Horizontal Line Shortcode allows Stored XSS.This issue affects Horizontal Line Shortcode: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/horizontal-line-shortcode/vulnerability/wordpress-horizontal-line-shortcode-plugin-1
stack.com/database/wordpress/plugin/horizontal-line-shortcode/vulnerability/wordpress-horizontal-line-shortcode-plugin-1-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23792 State: PUBLISHED Published: 2025-01-27T13:59:48.502Z Last Updated: 2025-01-27T14:48:56.840Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Busters Products: Passwordless WP – Login with your glance or fingerprint Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Busters Passwordless WP – Login with your glance or fingerprint allows Reflected XSS. This issue affects Passwordless WP – Login with your glance or fingerprint: from n/a through 1.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordp
/a through 1.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/passwordless-wp/vulnerability/wordpress-passwordless-wp-login-with-your-glance-or-fingerprint-plugin-1-1-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23793 State: PUBLISHED Published: 2025-01-16T20:08:14.899Z Last Updated: 2025-01-17T17:31:14.764Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Turcu Ciprian Products: Auto FTP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Turcu Ciprian Auto FTP allows Stored XSS. This issue affects Auto FTP: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/auto-ftp/vulnerability/wordpress-auto-ftp-plugin-1-0-1-csrf-to-stored-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2025-23794 State: PUBLISHED Published: 2025-01-16T20:07:00.412Z Last Updated: 2025-01-17T19:09:35.653Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: rccoder Products: wp_amaps Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rccoder wp_amaps allows Stored XSS.This issue affects wp_amaps: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-amaps/vulnerability/wordpress-wp-amaps-plugin-1-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve