Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-30923 State: PUBLISHED Published: 2025-03-27T10:55:58.799Z Last Updated: 2025-03-27T18:57:42.102Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: powerfulwp Products: Gift Message for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in powerfulwp Gift Message for WooCommerce allows Cross Site Request Forgery. This issue affects Gift Message for WooCommerce: from n/a through 1.7.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gift-message-for-woocommerce/vulnerability/wordpress-gift-message-for-woocommerce-plugin-1-7-8-cross-sit
ordpress/plugin/gift-message-for-woocommerce/vulnerability/wordpress-gift-message-for-woocommerce-plugin-1-7-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-30924 State: PUBLISHED Published: 2025-04-01T05:31:41.181Z Last Updated: 2025-04-01T13:46:20.741Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: primersoftware Products: Primer MyData for Woocommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in primersoftware Primer MyData for Woocommerce allows Reflected XSS. This issue affects Primer MyData for Woocommerce: from n/a through n/a. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/primer-mydata/vulnerability/wordpress-primer-mydata-for-wooc
erences: - https://patchstack.com/database/wordpress/plugin/primer-mydata/vulnerability/wordpress-primer-mydata-for-woocommerce-plugin-4-2-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30925 State: PUBLISHED Published: 2025-03-27T10:56:07.994Z Last Updated: 2025-03-27T18:57:42.759Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: webangon Products: The Pack Elementor addons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webangon The Pack Elementor addons allows Stored XSS. This issue affects The Pack Elementor addons: from n/a through 2.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/the-pack-addon/vulnerability/wordpress-the-pack-elementor-addons-plugin-2-1-1-cross
hstack.com/database/wordpress/plugin/the-pack-addon/vulnerability/wordpress-the-pack-elementor-addons-plugin-2-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30926 State: PUBLISHED Published: 2025-04-01T05:31:41.359Z Last Updated: 2025-04-01T13:46:05.476Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: KingAddons.com Products: King Addons for Elementor Problem Types: CWE-862 Description: Missing Authorization vulnerability in KingAddons.com King Addons for Elementor. This issue affects King Addons for Elementor: from n/a through 24.12.58. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-24-12-58-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-30927 State: PUBLISHED Published: 2025-06-06T12:54:19.973Z Last Updated: 2025-06-06T15:04:18.315Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Wordapp Team Products: Wordapp Problem Types: CWE-862 Description: Missing Authorization vulnerability in Wordapp Team Wordapp allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Wordapp: from n/a through 1.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wordapp/vulnerability/wordpress-wordapp-1-7-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-30928 State: PUBLISHED Published: 2025-06-06T12:54:19.523Z Last Updated: 2025-06-06T15:04:36.397Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: vicchi Products: WP Biographia Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vicchi WP Biographia allows Stored XSS. This issue affects WP Biographia: from n/a through 4.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-biographia/vulnerability/wordpress-wp-biographia-4-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30929 State: PUBLISHED Published: 2025-07-04T08:42:20.051Z Last Updated: 2025-07-08T14:06:38.406Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: amazewp Products: fluXtore Problem Types: CWE-862 Description: Missing Authorization vulnerability in amazewp fluXtore allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects fluXtore: from n/a through 1.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fluxtore/vulnerability/wordpress-fluxtore-plugin-1-6-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-30930 State: PUBLISHED Published: 2025-06-06T12:54:19.059Z Last Updated: 2025-06-06T15:04:57.800Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Unreal Themes Products: ACF: Yandex Maps Field Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unreal Themes ACF: Yandex Maps Field allows Stored XSS. This issue affects ACF: Yandex Maps Field: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/acf-yandex-maps-field/vulnerability/wordpress-acf-yandex-maps-field-1-1-cross-site-s
stack.com/database/wordpress/plugin/acf-yandex-maps-field/vulnerability/wordpress-acf-yandex-maps-field-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30931 State: PUBLISHED Published: 2025-06-06T12:54:18.585Z Last Updated: 2025-06-06T15:05:18.222Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Shamil Shafeev Products: «Подсказки» от DaData.ru Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamil Shafeev «Подсказки» от DaData.ru allows Stored XSS. This issue affects «Подсказки» от DaData.ru: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dadata-ru/vulnerability/wordpress-podskazki-ot-dadata-ru-1-0-6-cross-site-
ps://patchstack.com/database/wordpress/plugin/dadata-ru/vulnerability/wordpress-podskazki-ot-dadata-ru-1-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30932 State: PUBLISHED Published: 2025-06-06T12:54:18.100Z Last Updated: 2025-06-06T15:05:36.705Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: WP Compress Products: WP Compress for MainWP Problem Types: CWE-862 Description: Missing Authorization vulnerability in WP Compress WP Compress for MainWP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Compress for MainWP: from n/a through 6.30.32. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-compress-mainwp/vulnerability/wordpress-wp-compress-for-mainwp-6-30-32-broken-access-cont
m/database/wordpress/plugin/wp-compress-mainwp/vulnerability/wordpress-wp-compress-for-mainwp-6-30-32-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-30933 State: PUBLISHED Published: 2025-07-04T11:18:07.633Z Last Updated: 2025-07-07T14:59:02.553Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: LiquidThemes Products: LogisticsHub Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in LiquidThemes LogisticsHub allows Upload a Web Shell to a Web Server. This issue affects LogisticsHub: from n/a through 1.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/logistics-hub/vulnerability/wordpress-logisticshub-1-1-6-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-30934 State: PUBLISHED Published: 2025-06-06T12:54:17.586Z Last Updated: 2025-06-06T15:05:58.226Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: OLIVESYSTEM Products: 診断ジェネレータ作成プラグイン Problem Types: CWE-862 Description: Missing Authorization vulnerability in OLIVESYSTEM 診断ジェネレータ作成プラグイン allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects 診断ジェネレータ作成プラグイン: from n/a through 1.4.16. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/os-diagnosis-generator/vulnerability/wordpress-1-4-16-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-30935 State: PUBLISHED Published: 2025-06-06T12:54:17.118Z Last Updated: 2025-06-06T15:08:06.855Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: NickDuncan Products: Contact Form Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NickDuncan Contact Form allows DOM-Based XSS. This issue affects Contact Form: from n/a through 2.0.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/contact-form-ready/vulnerability/wordpress-contact-form-2-0-12-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30936 State: PUBLISHED Published: 2025-07-16T11:28:09.604Z Last Updated: 2025-07-16T13:45:53.140Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Torod Company for Information Technology Products: Torod Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Torod Company for Information Technology Torod allows SQL Injection. This issue affects Torod: from n/a through 1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/torod/vulnerability/wordpress-torod-1-9-sql-injection-vulnerability?_s_id=cv
://patchstack.com/database/wordpress/plugin/torod/vulnerability/wordpress-torod-1-9-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-30937 State: PUBLISHED Published: 2025-06-06T12:54:16.646Z Last Updated: 2025-06-06T15:08:23.494Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: stefanledin Products: Responsify WP Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stefanledin Responsify WP allows Stored XSS. This issue affects Responsify WP: from n/a through 1.9.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/responsify-wp/vulnerability/wordpress-responsify-wp-1-9-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30938 State: PUBLISHED Published: 2025-06-06T12:54:16.196Z Last Updated: 2025-06-06T16:03:11.361Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: broadly Products: Broadly for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in broadly Broadly for WordPress allows Stored XSS. This issue affects Broadly for WordPress: from n/a through 3.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/broadly/vulnerability/wordpress-broadly-for-wordpress-3-0-2-cross-site-scripting-xss-vulnerabilit
abase/wordpress/plugin/broadly/vulnerability/wordpress-broadly-for-wordpress-3-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30939 State: PUBLISHED Published: 2025-06-06T12:54:15.732Z Last Updated: 2025-06-06T16:03:17.556Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Debashish Products: IFrame Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Debashish IFrame Widget allows Stored XSS. This issue affects IFrame Widget: from n/a through 4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/iframe-widget/vulnerability/wordpress-iframe-widget-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30940 State: PUBLISHED Published: 2025-06-06T12:54:15.252Z Last Updated: 2025-06-06T16:03:26.645Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: melipayamak Products: Melipayamak Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in melipayamak Melipayamak allows Stored XSS. This issue affects Melipayamak: from n/a through 2.2.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/melipayamak/vulnerability/wordpress-melipayamak-2-2-12-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30941 State: PUBLISHED Published: 2025-06-06T12:54:14.791Z Last Updated: 2025-06-06T16:03:34.096Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Marvie Pons Products: Pinterest Verify Meta Tag Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marvie Pons Pinterest Verify Meta Tag allows Stored XSS. This issue affects Pinterest Verify Meta Tag: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pinterest-verify-meta-tag/vulnerability/wordpress-pinterest-verify-meta-tag-1-3
patchstack.com/database/wordpress/plugin/pinterest-verify-meta-tag/vulnerability/wordpress-pinterest-verify-meta-tag-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30942 State: PUBLISHED Published: 2025-06-06T12:54:14.331Z Last Updated: 2025-06-06T16:24:39.502Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: OTWthemes Products: Post Custom Templates Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Post Custom Templates Lite allows Stored XSS. This issue affects Post Custom Templates Lite: from n/a through 1.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/post-custom-templates-lite/vulnerability/wordpress-post-custom-templates-lite-1
patchstack.com/database/wordpress/plugin/post-custom-templates-lite/vulnerability/wordpress-post-custom-templates-lite-1-14-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30943 State: PUBLISHED Published: 2025-07-04T08:42:20.966Z Last Updated: 2025-07-08T14:05:57.642Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Aakif Kadiwala Products: Posts Slider Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aakif Kadiwala Posts Slider Shortcode allows DOM-Based XSS. This issue affects Posts Slider Shortcode: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/posts-slider-shortcode/vulnerability/wordpress-posts-slider-shortcode-plugin-1-
patchstack.com/database/wordpress/plugin/posts-slider-shortcode/vulnerability/wordpress-posts-slider-shortcode-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30944 State: PUBLISHED Published: 2025-10-22T14:32:04.793Z Last Updated: 2025-11-13T10:33:40.341Z Vendors: Essekia Products: Tablesome Table Premium Problem Types: CWE-862 Description: Missing Authorization vulnerability in Essekia Tablesome Table Premium tablesome-premium allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Tablesome Table Premium: from n/a through <= 1.1.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/tablesome-premium/vulnerability/wordpress-tablesome-table-premium-1-1-23-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-30945 State: PUBLISHED Published: 2025-06-06T12:54:13.836Z Last Updated: 2025-06-06T16:24:44.893Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: taskbuilder Products: Taskbuilder Problem Types: CWE-862 Description: Missing Authorization vulnerability in taskbuilder Taskbuilder allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Taskbuilder: from n/a through 4.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/taskbuilder/vulnerability/wordpress-taskbuilder-4-0-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-30946 State: PUBLISHED Published: 2025-06-06T12:54:13.310Z Last Updated: 2025-06-06T16:24:50.724Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Michael Cannon Products: Custom Bulk/Quick Edit Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Michael Cannon Custom Bulk/Quick Edit allows Cross Site Request Forgery. This issue affects Custom Bulk/Quick Edit: from n/a through 1.6.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-bulkquick-edit/vulnerability/wordpress-custom-bulk-quick-edit-1-6-10-cross-site-request-forgery-csrf-vulne
plugin/custom-bulkquick-edit/vulnerability/wordpress-custom-bulk-quick-edit-1-6-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-30947 State: PUBLISHED Published: 2025-07-04T08:42:21.913Z Last Updated: 2025-07-08T14:05:35.358Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: gopiplus Products: Cool fade popup Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus Cool fade popup allows Blind SQL Injection. This issue affects Cool fade popup: from n/a through 10.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cool-fade-popup/vulnerability/wordpress-cool-fade-popup-plugin-10-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-30948 State: PUBLISHED Published: 2025-06-06T12:54:12.562Z Last Updated: 2025-06-06T16:24:56.225Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Giraphix Creative Products: Layouts for Elementor Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Giraphix Creative Layouts for Elementor allows Cross Site Request Forgery. This issue affects Layouts for Elementor: from n/a through 1.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/layouts-for-elementor/vulnerability/wordpress-layouts-for-elementor-1-11-cross-site-request-forgery-csrf-vulnera
/plugin/layouts-for-elementor/vulnerability/wordpress-layouts-for-elementor-1-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-30949 State: PUBLISHED Published: 2025-07-16T11:28:09.137Z Last Updated: 2025-07-16T13:47:31.300Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Guru Team Products: Site Chat on Telegram Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Guru Team Site Chat on Telegram allows Object Injection. This issue affects Site Chat on Telegram: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/site-chat-on-telegram/vulnerability/wordpress-site-chat-on-telegram-1-0-4-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-30950 State: PUBLISHED Published: 2025-06-06T12:54:11.997Z Last Updated: 2025-10-27T20:26:31.388Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Wham Products: All Currencies for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham All Currencies for WooCommerce woocommerce-all-currencies allows Stored XSS.This issue affects All Currencies for WooCommerce: from n/a through 2.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-all-currencies/vulnerability/wor
ulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-all-currencies/vulnerability/wordpress-all-currencies-for-woocommerce-2-4-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30951 State: PUBLISHED Published: 2025-06-06T12:54:11.513Z Last Updated: 2025-06-06T15:09:20.638Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Stiofan Products: BlockStrap Page Builder - Bootstrap Blocks Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan BlockStrap Page Builder - Bootstrap Blocks allows Stored XSS. This issue affects BlockStrap Page Builder - Bootstrap Blocks: from n/a through 0.1.36. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/blockstrap-page-builder-blocks/vu
CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/blockstrap-page-builder-blocks/vulnerability/wordpress-blockstrap-page-builder-bootstrap-blocks-0-1-36-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30952 State: PUBLISHED Published: 2025-06-06T12:54:11.056Z Last Updated: 2025-06-06T15:09:37.418Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: wpdive Products: Nexa Blocks Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdive Nexa Blocks allows Stored XSS. This issue affects Nexa Blocks: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/nexa-blocks/vulnerability/wordpress-nexa-blocks-1-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-30953 State: PUBLISHED Published: 2025-06-06T12:54:10.601Z Last Updated: 2025-06-06T15:09:54.112Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: CRM Perks Products: WP Gravity Forms Salesforce Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Salesforce allows Phishing. This issue affects WP Gravity Forms Salesforce: from n/a through 1.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gf-salesforce-crmperks/vulnerability/wordpress-wp-gravity-forms-salesforce-1-4-7-open-redirection-vulnerabili
ess/plugin/gf-salesforce-crmperks/vulnerability/wordpress-wp-gravity-forms-salesforce-1-4-7-open-redirection-vulnerability?_s_id=cve