Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-58805 State: PUBLISHED Published: 2025-09-05T13:45:09.547Z Last Updated: 2025-09-08T15:03:00.208Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: OTWthemes Products: Widgetize Pages Light Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Widgetize Pages Light allows Stored XSS. This issue affects Widgetize Pages Light: from n/a through 3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/widgetize-pages-light/vulnerability/wordpress-widgetize-pages-light-plugin-3-0-cross-site-scrip
atabase/wordpress/plugin/widgetize-pages-light/vulnerability/wordpress-widgetize-pages-light-plugin-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58806 State: PUBLISHED Published: 2025-09-05T13:45:10.088Z Last Updated: 2025-09-08T15:03:20.656Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: imjoehaines Products: WordPress Error Monitoring by Bugsnag Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in imjoehaines WordPress Error Monitoring by Bugsnag allows Stored XSS. This issue affects WordPress Error Monitoring by Bugsnag: from n/a through 1.6.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bugsnag/vulnerability/wordpress-wordpress-error-monitoring-by-bugsnag-plugin-1-6-3-cross-site
/database/wordpress/plugin/bugsnag/vulnerability/wordpress-wordpress-error-monitoring-by-bugsnag-plugin-1-6-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58807 State: PUBLISHED Published: 2025-09-05T13:45:10.608Z Last Updated: 2025-09-05T16:18:56.375Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Dsingh Products: Purge Varnish Cache Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Dsingh Purge Varnish Cache allows Stored XSS. This issue affects Purge Varnish Cache: from n/a through 2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/purge-varnish/vulnerability/wordpress-purge-varnish-cache-plugin-2-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58808 State: PUBLISHED Published: 2025-09-05T13:45:11.223Z Last Updated: 2025-09-05T16:18:47.990Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Babar Products: prettyPhoto Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Babar prettyPhoto allows Stored XSS. This issue affects prettyPhoto: from n/a through 1.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/prettyphoto/vulnerability/wordpress-prettyphoto-plugin-1-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58809 State: PUBLISHED Published: 2025-09-05T13:45:11.994Z Last Updated: 2025-09-05T15:41:42.501Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Nick Ciske Products: To Lead For Salesforce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Nick Ciske To Lead For Salesforce allows Reflected XSS. This issue affects To Lead For Salesforce: from n/a through 2.7.3.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/salesforce-wordpress-to-lead/vulnerability/wordpress-to-lead-for-salesforce-plugin-2-7-3-9-cross-site-request-forgery-csrf-vulnerabilit
press-to-lead/vulnerability/wordpress-to-lead-for-salesforce-plugin-2-7-3-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58810 State: PUBLISHED Published: 2025-09-05T13:45:12.530Z Last Updated: 2025-09-05T15:43:03.933Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: jimmywb Products: Simple Link List Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jimmywb Simple Link List Widget allows Stored XSS. This issue affects Simple Link List Widget: from n/a through 0.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-link-list-widget/vulnerability/wordpress-simple-link-list-widget-plugin-0-3-2-cross-
om/database/wordpress/plugin/simple-link-list-widget/vulnerability/wordpress-simple-link-list-widget-plugin-0-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58811 State: PUBLISHED Published: 2025-09-05T13:45:13.096Z Last Updated: 2025-09-05T19:23:44.357Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: WP CodeUs Products: Ultimate Client Dash Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP CodeUs Ultimate Client Dash allows Stored XSS. This issue affects Ultimate Client Dash: from n/a through 4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ulimate-client-dash/vulnerability/wordpress-ultimate-client-dash-plugin-4-6-cross-site-scripting-x
base/wordpress/plugin/ulimate-client-dash/vulnerability/wordpress-ultimate-client-dash-plugin-4-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58812 State: PUBLISHED Published: 2025-09-05T13:45:13.632Z Last Updated: 2025-09-05T19:24:35.774Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: PriceListo Products: Best Restaurant Menu by PriceListo Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PriceListo Best Restaurant Menu by PriceListo allows Stored XSS. This issue affects Best Restaurant Menu by PriceListo: from n/a through 1.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/best-restaurant-menu-by-pricelisto/vulnerability/wor
ent: References: - https://patchstack.com/database/wordpress/plugin/best-restaurant-menu-by-pricelisto/vulnerability/wordpress-best-restaurant-menu-by-pricelisto-plugin-1-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58813 State: PUBLISHED Published: 2025-09-05T13:45:14.163Z Last Updated: 2025-09-05T19:25:20.454Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: ThemeArile Products: Consultstreet Problem Types: CWE-862 Description: Missing Authorization vulnerability in ThemeArile Consultstreet allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Consultstreet: from n/a through 3.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/consultstreet/vulnerability/wordpress-consultstreet-theme-3-0-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58814 State: PUBLISHED Published: 2025-09-05T13:45:14.697Z Last Updated: 2025-09-05T19:25:49.864Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Ram Ratan Maurya Products: Stagtools Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ram Ratan Maurya Stagtools allows Stored XSS. This issue affects Stagtools: from n/a through 2.3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/stagtools/vulnerability/wordpress-stagtools-plugin-2-3-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58815 State: PUBLISHED Published: 2025-09-05T13:45:15.245Z Last Updated: 2025-09-05T19:26:46.715Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Rubel Miah Products: Aitasi Coming Soon Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Rubel Miah Aitasi Coming Soon allows Object Injection. This issue affects Aitasi Coming Soon: from n/a through 2.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/aitasi-coming-soon/vulnerability/wordpress-aitasi-coming-soon-plugin-2-0-2-deserialization-of-untrusted-data-vulnerability?_s_id=cve
CVE ID: CVE-2025-58816 State: PUBLISHED Published: 2025-09-05T13:45:16.319Z Last Updated: 2025-09-05T19:27:26.562Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: Plugin Devs Products: Product Carousel Slider for Elementor Problem Types: CWE-862 Description: Missing Authorization vulnerability in Plugin Devs Product Carousel Slider for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Product Carousel Slider for Elementor: from n/a through 2.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ecommerce-product-carousel-slider-for-elementor/vuln
ent: References: - https://patchstack.com/database/wordpress/plugin/ecommerce-product-carousel-slider-for-elementor/vulnerability/wordpress-product-carousel-slider-for-elementor-plugin-2-1-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58817 State: PUBLISHED Published: 2025-09-05T13:45:16.910Z Last Updated: 2025-09-05T19:29:45.617Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: DesertThemes Products: SoftMe Problem Types: CWE-862 Description: Missing Authorization vulnerability in DesertThemes SoftMe allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SoftMe: from n/a through 1.1.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/softme/vulnerability/wordpress-softme-theme-1-1-24-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58818 State: PUBLISHED Published: 2025-09-05T13:45:17.453Z Last Updated: 2025-09-05T19:30:51.661Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: SwiftNinjaPro Products: Developer Tools Blocker Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in SwiftNinjaPro Developer Tools Blocker allows Cross Site Request Forgery. This issue affects Developer Tools Blocker: from n/a through 3.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/swiftninjapro-inspect-element-console-blocker/vulnerability/wordpress-developer-tools-blocker-plugin-3-2-1-cross-
plugin/swiftninjapro-inspect-element-console-blocker/vulnerability/wordpress-developer-tools-blocker-plugin-3-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58819 State: PUBLISHED Published: 2025-09-05T13:45:18.000Z Last Updated: 2025-09-05T15:47:31.850Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: CreedAlly Products: Bulk Featured Image Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in CreedAlly Bulk Featured Image allows Upload a Web Shell to a Web Server. This issue affects Bulk Featured Image: from n/a through 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bulk-featured-image/vulnerability/wordpress-bulk-featured-image-plugin-1-2-2-arbitrary-file-upload-vulnerabil
ess/plugin/bulk-featured-image/vulnerability/wordpress-bulk-featured-image-plugin-1-2-2-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-58820 State: PUBLISHED Published: 2025-09-05T13:45:18.586Z Last Updated: 2025-09-05T15:45:22.189Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Themepoints Products: Carousel Ultimate Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Carousel Ultimate allows Stored XSS. This issue affects Carousel Ultimate: from n/a through 1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/carousel/vulnerability/wordpress-carousel-ultimate-plugin-1-8-cross-site-scripting-xss-vulnerability?_s
wordpress/plugin/carousel/vulnerability/wordpress-carousel-ultimate-plugin-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58821 State: PUBLISHED Published: 2025-09-05T13:45:19.114Z Last Updated: 2025-09-05T15:39:23.584Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: wpdever Products: WP Notification Bell Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdever WP Notification Bell allows Stored XSS. This issue affects WP Notification Bell: from n/a through 1.4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-notification-bell/vulnerability/wordpress-wp-notification-bell-plugin-1-4-5-cross-site-scripting-
se/wordpress/plugin/wp-notification-bell/vulnerability/wordpress-wp-notification-bell-plugin-1-4-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58822 State: PUBLISHED Published: 2025-09-05T13:45:19.736Z Last Updated: 2025-09-08T15:03:38.253Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: mndpsingh287 Products: WP Mail Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mndpsingh287 WP Mail allows DOM-Based XSS. This issue affects WP Mail: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-mail/vulnerability/wordpress-wp-mail-plugin-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58823 State: PUBLISHED Published: 2025-09-05T13:45:20.325Z Last Updated: 2025-09-08T15:04:01.399Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: The African Boss Products: Get Cash Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The African Boss Get Cash allows Stored XSS. This issue affects Get Cash: from n/a through 3.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/get-cash/vulnerability/wordpress-get-cash-plugin-3-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58824 State: PUBLISHED Published: 2025-09-05T13:45:20.872Z Last Updated: 2025-09-08T15:26:24.356Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: webriti Products: Shk Corporate Problem Types: CWE-862 Description: Missing Authorization vulnerability in webriti Shk Corporate allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Shk Corporate: from n/a through 2.4.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/shk-corporate/vulnerability/wordpress-shk-corporate-theme-2-4-1-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58825 State: PUBLISHED Published: 2025-09-05T13:45:21.417Z Last Updated: 2025-09-08T15:26:07.251Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Habibur Rahman Products: Comment Form WP &#8211; Customize Default Comment Form Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Habibur Rahman Comment Form WP &#8211; Customize Default Comment Form allows Stored XSS. This issue affects Comment Form WP &#8211; Customize Default Comment Form: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/w
om n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/comment-form-wp/vulnerability/wordpress-comment-form-wp-customize-default-comment-form-plugin-2-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58826 State: PUBLISHED Published: 2025-09-05T13:45:21.950Z Last Updated: 2025-09-05T15:44:08.525Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Eric Mann Products: WP Publication Archive Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eric Mann WP Publication Archive allows Stored XSS. This issue affects WP Publication Archive : from n/a through 3.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-publication-archive/vulnerability/wordpress-wp-publication-archive-plugin-3-0-1-cross-
.com/database/wordpress/plugin/wp-publication-archive/vulnerability/wordpress-wp-publication-archive-plugin-3-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58827 State: PUBLISHED Published: 2025-09-05T13:45:22.470Z Last Updated: 2025-09-05T15:43:52.211Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: PickPlugins Products: Job Board Manager Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in PickPlugins Job Board Manager allows Code Injection. This issue affects Job Board Manager: from n/a through 2.1.61. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/job-board-manager/vulnerability/wordpress-job-board-manager-plugin-2-1-61-content-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-58828 State: PUBLISHED Published: 2025-09-05T13:45:22.980Z Last Updated: 2025-09-05T15:37:14.834Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: codemstory Products: 코드엠샵 소셜톡 Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codemstory 코드엠샵 소셜톡 allows Stored XSS. This issue affects 코드엠샵 소셜톡: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mshop-naver-talktalk/vulnerability/wordpress-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58829 State: PUBLISHED Published: 2025-09-05T13:45:23.496Z Last Updated: 2025-09-05T15:36:59.780Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: aitool Products: Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One allows Server Side Request Forgery. This issue affects Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One: from n/a through 2.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack
All in One: from n/a through 2.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ai-auto-tool/vulnerability/wordpress-ai-auto-tool-content-writing-assistant-gemini-writer-chatgpt-all-in-one-plugin-2-2-6-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58830 State: PUBLISHED Published: 2025-09-05T13:45:24.005Z Last Updated: 2025-09-05T19:32:17.580Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: snagysandor Products: Parallax Scrolling Enllax.js Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in snagysandor Parallax Scrolling Enllax.js allows Stored XSS. This issue affects Parallax Scrolling Enllax.js: from n/a through 0.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/parallax-scrolling-enllax-js/vulnerability/wordpress-parallax-scroll
- https://patchstack.com/database/wordpress/plugin/parallax-scrolling-enllax-js/vulnerability/wordpress-parallax-scrolling-enllax-js-plugin-0-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58831 State: PUBLISHED Published: 2025-09-05T13:45:24.521Z Last Updated: 2025-09-05T19:34:05.073Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: snagysandor Products: Parallax Scrolling Enllax.js Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in snagysandor Parallax Scrolling Enllax.js allows Cross Site Request Forgery. This issue affects Parallax Scrolling Enllax.js: from n/a through 0.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/parallax-scrolling-enllax-js/vulnerability/wordpress-parallax-scrolling-enllax-js-plugin-0-0-6-cross-s
/wordpress/plugin/parallax-scrolling-enllax-js/vulnerability/wordpress-parallax-scrolling-enllax-js-plugin-0-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58832 State: PUBLISHED Published: 2025-09-05T13:45:25.037Z Last Updated: 2025-09-05T19:35:11.856Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: webvitaly Products: Search by Google Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Search by Google allows Stored XSS. This issue affects Search by Google: from n/a through 1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/search-google/vulnerability/wordpress-search-by-google-plugin-1-9-cross-site-scripting-xss-vulnerability?_s_id
ss/plugin/search-google/vulnerability/wordpress-search-by-google-plugin-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58833 State: PUBLISHED Published: 2025-09-05T13:45:25.574Z Last Updated: 2025-09-05T19:35:50.185Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: INVELITY Products: Invelity MyGLS connect Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in INVELITY Invelity MyGLS connect allows Object Injection. This issue affects Invelity MyGLS connect: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/invelity-mygls-connect/vulnerability/wordpress-invelity-mygls-connect-plugin-1-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58834 State: PUBLISHED Published: 2025-09-05T13:45:26.105Z Last Updated: 2025-09-05T19:37:40.192Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: gugu Products: short.io Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gugu short.io allows DOM-Based XSS. This issue affects short.io: from n/a through 2.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-shortcm/vulnerability/wordpress-short-io-plugin-2-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve