Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
_reset_key() unconditionally. Because it only checks that the caller is authenticated, and not that they own or may edit the target account, any authenticated attacker, with Subscriber-level access and above, can obtain a password reset link for an administrator and hijack that account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cfd35a3c-7203-4832-8b0d-56f3e7983118?source=cve - https://wordpress.org/plugins/integration-cds/#developers - https://plugins.trac.wordpress.org/browser/integration-cds/trunk/src/API/AuthenticatedEndpoint.php - https://plugins.trac.wordpress.org/browser/integration-cds/trunk/src/API/Endpo
trunk/src/API/AuthenticatedEndpoint.php - https://plugins.trac.wordpress.org/browser/integration-cds/trunk/src/API/Endpoints/GetResetUserPasswordLink.php - https://plugins.trac.wordpress.org/changeset?new=3329717%40integration-cds%2Ftrunk&old=3323579%40integration-cds%2Ftrunk
CVE ID: CVE-2025-7696 State: PUBLISHED Published: 2025-07-19T04:23:02.149Z Last Updated: 2025-07-21T16:54:12.690Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: crmperks Products: Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms Problem Types: CWE-502 Description: The Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.3 via deserialization of untrusted input within the verify_field_val() function. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a
al() function. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain in the Contact Form 7 plugin, which is likely to be used alongside, allows attackers to delete arbitrary files, leading to a denial of service or remote code execution when the wp-config.php file is deleted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6980112b-a555-47a4-b2d7-f0187d52fc63?source=cve - https://plugins.trac.wordpress.org/browser/integration-for-contact-form-7-and-pipedrive/tags/1.2.3/integration-for-contact-form-7-and-pipedrive.php#L953 - https://wordpress.org/plugins/int
orm-7-and-pipedrive/tags/1.2.3/integration-for-contact-form-7-and-pipedrive.php#L953 - https://wordpress.org/plugins/integration-for-contact-form-7-and-pipedrive/#developers - https://plugins.trac.wordpress.org/changeset/3329002/
CVE ID: CVE-2025-7697 State: PUBLISHED Published: 2025-07-19T04:23:02.719Z Last Updated: 2025-07-21T17:42:46.723Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: crmperks Products: Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms Problem Types: CWE-502 Description: The Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.1 via deserialization of untrusted input within the verify_field_val() function. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional prese
_field_val() function. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain in the Contact Form 7 plugin, which is likely to be used alongside, allows attackers to delete arbitrary files, leading to a denial of service or remote code execution when the wp-config.php file is deleted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a0146f17-35bd-45cf-b9c6-c4fce688efc2?source=cve - https://wordpress.org/plugins/integration-for-contact-form-7-and-google-sheets/#developers - https://plugins.trac.wordpress.org/browser/integration-for-contact-form-7-and-google-sh
-and-google-sheets/#developers - https://plugins.trac.wordpress.org/browser/integration-for-contact-form-7-and-google-sheets/tags/1.1.1/integration-for-contact-form-7-and-google-sheets.php#L923 - https://plugins.trac.wordpress.org/changeset/3329005/
CVE ID: CVE-2025-7698 State: PUBLISHED Published: 2025-09-29T00:47:02.910Z Last Updated: 2025-09-29T11:50:46.325Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L) Vendors: Canon Inc. Products: Generic Plus PCL6 Printer Driver, Generic Plus UFR II Printer Driver, Generic Plus LIPS4 Printer Driver, Generic Plus LIPSLX Printer Driver, Generic Plus PS Printer Driver Problem Types: CWE-125 Description: Out-of-bounds read vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver Additional Analyst Notes: - CISA ADP Vuln
r Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://psirt.canon/advisory-information/cp2025-005/ - https://canon.jp/support/support-info/250925vulnerability-response - https://www.usa.canon.com/about-us/to-our-customers/cp2025-005-vulnerabilities-remediation-for-certain-printer-drivers-for-production-printers-office-small-office-multifunction-printers-laser-printers - https://www.canon-europe.com/support/product-security/
CVE ID: CVE-2025-7699 State: PUBLISHED Published: 2025-07-16T09:41:12.220Z Last Updated: 2025-07-16T14:39:53.942Z Vendors: ASUSTOR Products: ADM Problem Types: CWE-287 Description: An improper access control vulnerability was found in the EZ Sync Manager of ADM, which allows authenticated users to copy arbitrary files from the server file system into their own EZSync folder. The vulnerability is due to a lack of authorization checks on the file parameter of the HTTP request. Attackers can exploit this flaw to access files outside their authorized scope, provided the file has readable permissions for other users on the underlying OS. This can lead to unauthorized exposure of sensitive data. A
s readable permissions for other users on the underlying OS. This can lead to unauthorized exposure of sensitive data. Affected products and versions include: from ADM 4.1.0 to ADM 4.3.3.RH61 as well as ADM 5.0.0.RIN1 and earlier. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.asustor.com/security/security_advisory_detail?id=46
CVE ID: CVE-2025-7700 State: PUBLISHED Published: 2025-11-07T18:59:28.962Z Last Updated: 2025-11-07T19:08:06.222Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Problem Types: CWE-476 Description: A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and cause a denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-7700 - https://bugzilla.redhat.com/show_bu
P Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-7700 - https://bugzilla.redhat.com/show_bug.cgi?id=2380420
CVE ID: CVE-2025-7702 State: PUBLISHED Published: 2025-09-19T07:58:32.331Z Last Updated: 2025-09-19T11:53:02.860Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: Pusula Communication Information Internet Industry and Trade Ltd. Co. Products: Manageable Email Sending System Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Pusula Communication Information Internet Industry and Trade Ltd. Co. Manageable Email Sending System allows Exploiting Trust in Client.This issue affects Manageable Email Sending System: from <=2025.06 before 2025.08.06. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
mail Sending System: from <=2025.06 before 2025.08.06. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0274
CVE ID: CVE-2025-7703 State: PUBLISHED Published: 2025-07-16T09:13:39.156Z Last Updated: 2025-07-17T15:03:12.820Z Vendors: TECNO Products: tech.palm.id Problem Types: CWE-287 Description: Authentication vulnerability in the mobile application（tech.palm.id）may lead to the risk of information leakage. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.tecno.com/SRC/blogdetail/428?lang=en_US - https://security.tecno.com/SRC/securityUpdates
CVE ID: CVE-2025-7704 State: PUBLISHED Published: 2025-11-13T09:12:11.508Z Last Updated: 2025-11-13T18:12:05.194Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: SMCI Products: SYS-111C-NR Problem Types: CWE-121 Description: Supermicro BMC Insyde SMASH shell program has a stacked-based overflow vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.supermicro.com/en/support/security_BMC_IPMI_Oct_2025
CVE ID: CVE-2025-7705 State: PUBLISHED Published: 2025-07-22T11:49:00.964Z Last Updated: 2025-07-22T13:57:30.620Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ABB Products: Switch Actuator 4 DU-83330, Switch actuator, door/light 4 DU -83330-500 Problem Types: CWE-489 Description: : Active Debug Code vulnerability in ABB Switch Actuator 4 DU-83330, ABB Switch actuator, door/light 4 DU -83330-500.This issue affects Switch Actuator 4 DU-83330: All Versions; Switch actuator, door/light 4 DU -83330-500: All Versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A4556&Language
- CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A4556&LanguageCode=en&DocumentPartId=pdf&Action=Launch&_gl=1*1sgofnl*_gcl_au*MjA0NTI4OTE1Mi4xNzUzMTgxNTA2*_ga*MTIxMTUxMzg5MS4xNzUzMTgxNTA3*_ga_46ZFBRSZNM*czE3NTMxODE1MDckbzEkZzEkdDE3NTMxODE2MDIkajYwJGwwJGgw
CVE ID: CVE-2025-7707 State: PUBLISHED Published: 2025-10-13T16:15:08.249Z Last Updated: 2025-10-14T14:32:42.854Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: run-llama Products: run-llama/llama_index Problem Types: CWE-377 Description: The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, data tampering, or privilege escalation. The vulnerability arises from the use of a shared cache directory instead of a user-specific
g, or privilege escalation. The vulnerability arises from the use of a shared cache directory instead of a user-specific one, making it susceptible to local data tampering and denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/3fe2c8ab-6727-4aef-a0ef-4d2818e48803 - https://github.com/run-llama/llama_index/commit/98816394d57c7f53f847ed7b60725e69d0e7aae4
CVE ID: CVE-2025-7709 State: PUBLISHED Published: 2025-09-08T14:51:49.065Z Last Updated: 2025-11-18T23:03:59.973Z Vendors: SQLite Products: FTS5 Problem Types: CWE-190 Description: An integer overflow exists in the FTS5 https://sqlite.org/fts5.html extension. It occurs when the size of an array of tombstone pointers is calculated and truncated into a 32-bit integer. A pointer to partially controlled data can then be written out of bounds. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/google/security-research/security/advisories/GHSA-v2c8-vqqp-hv3g
CVE ID: CVE-2025-7710 State: PUBLISHED Published: 2025-08-02T11:23:55.098Z Last Updated: 2025-08-04T13:23:10.939Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Brave Products: Brave Conversion Engine (PRO) Problem Types: CWE-288 Description: The Brave Conversion Engine (PRO) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 0.7.7. This is due to the plugin not properly restricting a claimed identity while authenticating with Facebook. This makes it possible for unauthenticated attackers to log in as other users, including administrators. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
log in as other users, including administrators. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/604249c6-b23a-40e9-984d-2014f5c97249?source=cve - https://getbrave.io/brave-pro-changelog/
CVE ID: CVE-2025-7711 State: PUBLISHED Published: 2025-11-17T22:27:44.762Z Last Updated: 2025-11-18T16:36:12.424Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: techlabpro1 Products: Classified Listing – AI-Powered Classified ads & Business Directory Plugin Problem Types: CWE-94 Description: The The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.0.3. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, wi
t does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d9b10db9-0c7c-4f13-9d98-6d407446cfb8?source=cve - https://plugins.trac.wordpress.org/browser/classified-listing/tags/5.0.2/app/Controllers/Hooks/FilterHooks.php#L367
CVE ID: CVE-2025-7712 State: PUBLISHED Published: 2025-07-17T02:24:33.749Z Last Updated: 2025-07-17T14:20:30.340Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: MangaBooth Products: Madara - Core Problem Types: CWE-22 Description: The Madara - Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wp_manga_delete_zip() function in all versions up to, and including, 2.2.3. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Additional Analyst Notes: - CIS
ly lead to remote code execution when the right file is deleted (such as wp-config.php). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f9de8e90-5bda-4ab1-aa78-2748cd717376?source=cve - https://mangabooth.com/product/wp-manga-theme-madara/
CVE ID: CVE-2025-7715 State: PUBLISHED Published: 2025-07-21T16:36:26.815Z Last Updated: 2025-07-22T14:02:39.136Z Vendors: Drupal Products: Block Attributes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Block Attributes allows Cross-Site Scripting (XSS).This issue affects Block Attributes: from 0.0.0 before 1.1.0, from 2.0.0 before 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-090
CVE ID: CVE-2025-7716 State: PUBLISHED Published: 2025-07-21T16:36:53.447Z Last Updated: 2025-07-22T14:01:22.850Z Vendors: Drupal Products: Real-time SEO for Drupal Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Real-time SEO for Drupal allows Cross-Site Scripting (XSS).This issue affects Real-time SEO for Drupal: from 2.0.0 before 2.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-091
CVE ID: CVE-2025-7717 State: PUBLISHED Published: 2025-07-21T16:37:14.684Z Last Updated: 2025-07-22T14:00:15.979Z Vendors: Drupal Products: File Download Problem Types: CWE-862 Description: Missing Authorization vulnerability in Drupal File Download allows Forceful Browsing.This issue affects File Download: from 0.0.0 before 1.9.0, from 2.0.0 before 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-089
CVE ID: CVE-2025-7718 State: PUBLISHED Published: 2025-09-10T12:25:30.026Z Last Updated: 2025-09-10T14:06:50.678Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: pixel_prime Products: Resideo Plugin for Resideo - Real Estate WordPress Theme Problem Types: CWE-639 Description: The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with Subscriber-level access and above, t
their details like email. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f8375ecf-e64b-4649-9341-fa45bf5556c3?source=cve - https://themeforest.net/item/resideo-real-estate-wordpress-theme/27791406
CVE ID: CVE-2025-7719 State: PUBLISHED Published: 2025-11-07T16:28:03.432Z Last Updated: 2025-11-13T17:17:12.293Z Vendors: GE Vernova Products: Smallworld Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova Smallworld on Windows, Linux allows File Manipulation.This issue affects Smallworld: 5.3.5. and previous versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gevernova.com/content/dam/cyber_security/global/en_US/pdfs/SecurityAdvisory_ArbitraryFileOps_SWMFS.pdf
CVE ID: CVE-2025-7721 State: PUBLISHED Published: 2025-10-03T11:17:11.999Z Last Updated: 2025-10-03T18:09:35.655Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: beardev Products: JoomSport – for Sports: Team & League, Football, Hockey & more Problem Types: CWE-98 Description: The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.7.3 via the task parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypas
ute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4f3900c7-2acb-4031-9854-b0b13e172e1f?source=cve - https://plugins.trac.wordpress.org/browser/joomsport-sports-league-results-management/trunk/sportleague/base/wordpress/classes/class-jsport-controller.php#L74 - https://plugins.trac.wordpress.org/changeset/3371353/
CVE ID: CVE-2025-7722 State: PUBLISHED Published: 2025-07-23T02:24:40.269Z Last Updated: 2025-07-23T17:55:35.289Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: steverio Products: Social Streams Problem Types: CWE-272 Description: The Social Streams plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.1. This is due to the plugin not properly validating a user's identity prior to updating their user meta information in the update_user_meta() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change their user type to that of an administrator. Additional Analy
tackers, with Subscriber-level access and above, to change their user type to that of an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f3f01b88-6f93-4ee8-8d59-9165ebcd4dd1?source=cve - https://plugins.trac.wordpress.org/browser/social-streams/trunk/src/php/JsonAPI.php#275
CVE ID: CVE-2025-7723 State: PUBLISHED Published: 2025-07-22T20:42:56.916Z Last Updated: 2025-07-24T03:55:23.765Z Vendors: TP-Link Systems Inc. Products: VIGI NVR1104H-4P V1, VIGI NVR2016H-16MP V2 Problem Types: CWE-78 Description: A command injection vulnerability exists that can be exploited after authentication in VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2.This issue affects VIGI NVR1104H-4P V1: before 1.1.5 Build 250518; VIGI NVR2016H-16MP V2: before 1.3.1 Build 250407. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/support/faq/4547/ - https://www.tp-link.com/jp/support/download/vigi-nvr1104h-4p/#Firmware - https://www.tp-link.com/jp/suppor
t/faq/4547/ - https://www.tp-link.com/jp/support/download/vigi-nvr1104h-4p/#Firmware - https://www.tp-link.com/jp/support/download/vigi-nvr2016h-16mp/#Firmware
CVE ID: CVE-2025-7724 State: PUBLISHED Published: 2025-07-22T20:43:18.637Z Last Updated: 2025-07-24T03:55:24.925Z Vendors: TP-Link Systems Inc. Products: VIGI NVR1104H-4P V1, VIGI NVR2016H-16MP V2 Problem Types: CWE-78 Description: An unauthenticated OS command injection vulnerability exists in VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2.This issue affects VIGI NVR1104H-4P V1: before 1.1.5 Build 250518; VIGI NVR2016H-16MP V2: before 1.3.1 Build 250407. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/support/faq/4547/ - https://www.tp-link.com/jp/support/download/vigi-nvr1104h-4p/#Firmware - https://www.tp-link.com/jp/support/download/vigi-nvr2016
ww.tp-link.com/jp/support/download/vigi-nvr1104h-4p/#Firmware - https://www.tp-link.com/jp/support/download/vigi-nvr2016h-16mp/#Firmware
CVE ID: CVE-2025-7725 State: PUBLISHED Published: 2025-08-01T04:24:28.690Z Last Updated: 2025-08-01T19:13:56.606Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: contest-gallery Products: Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI Problem Types: CWE-79 Description: The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons, OpenAI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the comment feature in all versions up to, and including, 26.1.0 due to
is vulnerable to Stored Cross-Site Scripting via the comment feature in all versions up to, and including, 26.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/18003103-3a14-4cbc-8bed-87a8ab050308?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3334370%40contest-gallery%2Ftrunk&old=3333852%40contest-gallery%2Ftrunk&sfp_email=&sfph_mail=