Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gdpr-cookie-consent/vulnerability/wordpress-wp-cookie-notice-for-gdpr-ccpa-eprivacy-consent-3-8-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49286 State: PUBLISHED Published: 2025-06-06T12:53:42.738Z Last Updated: 2025-06-06T19:24:00.192Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WP Table Builder Products: WP Table Builder Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Table Builder WP Table Builder allows Cross Site Request Forgery. This issue affects WP Table Builder: from n/a through 2.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-table-builder/vulnerability/wordpress-wp-table-builder-2-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49287 State: PUBLISHED Published: 2025-06-06T12:53:43.203Z Last Updated: 2025-06-06T19:23:54.939Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: WebToffee Products: Product Feed for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in WebToffee Product Feed for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Product Feed for WooCommerce: from n/a through 2.2.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/webtoffee-product-feed/vulnerability/wordpress-product-feed-for-woocommerce-2-2-
atchstack.com/database/wordpress/plugin/webtoffee-product-feed/vulnerability/wordpress-product-feed-for-woocommerce-2-2-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49288 State: PUBLISHED Published: 2025-06-06T12:53:43.649Z Last Updated: 2025-06-06T19:23:49.289Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Rustaurius Products: Ultimate WP Mail Problem Types: CWE-862 Description: Missing Authorization vulnerability in Rustaurius Ultimate WP Mail allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ultimate WP Mail: from n/a through 1.3.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ultimate-wp-mail/vulnerability/wordpress-ultimate-wp-mail-1-3-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49289 State: PUBLISHED Published: 2025-06-06T12:53:44.101Z Last Updated: 2025-06-06T19:23:43.572Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: add-ons.org Products: PDF for WPForms Problem Types: CWE-862 Description: Missing Authorization vulnerability in add-ons.org PDF for WPForms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF for WPForms: from n/a through 5.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pdf-for-wpforms/vulnerability/wordpress-pdf-for-wpforms-5-5-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49290 State: PUBLISHED Published: 2025-06-27T11:52:32.608Z Last Updated: 2025-06-27T14:46:50.256Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Jory Hogeveen Products: Off-Canvas Sidebars & Menus (Slidebars) Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus (Slidebars) allows Reflected XSS. This issue affects Off-Canvas Sidebars & Menus (Slidebars): from n/a through 0.5.8.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/off-canvas-sidebars/vulnerab
es: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/off-canvas-sidebars/vulnerability/wordpress-off-canvas-sidebars-menus-slidebars-plugin-0-5-8-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49291 State: PUBLISHED Published: 2025-06-06T12:53:44.559Z Last Updated: 2025-06-06T19:23:38.290Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: codepeople Products: Calculated Fields Form Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in codepeople Calculated Fields Form allows Cross Site Request Forgery. This issue affects Calculated Fields Form: from n/a through 5.3.58. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/calculated-fields-form/vulnerability/wordpress-calculated-fields-form-5-3-58-cross-site-request-forgery-csrf-vulnerabilit
alculated-fields-form/vulnerability/wordpress-calculated-fields-form-5-3-58-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49292 State: PUBLISHED Published: 2025-06-06T12:53:45.090Z Last Updated: 2025-06-06T19:23:33.098Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Cozmoslabs Products: Profile Builder Problem Types: CWE-1284 Description: Improper Validation of Specified Quantity in Input vulnerability in Cozmoslabs Profile Builder allows Phishing. This issue affects Profile Builder: from n/a through 3.13.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/profile-builder/vulnerability/wordpress-profile-builder-3-13-8-content-spoofing-vulnerability?_s_id=cve
CVE ID: CVE-2025-49293 State: PUBLISHED Published: 2025-06-06T12:53:45.575Z Last Updated: 2025-06-06T19:23:27.955Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: CodeRevolution Products: Crawlomatic Multisite Scraper Post Generator Problem Types: CWE-862 Description: Missing Authorization vulnerability in CodeRevolution Crawlomatic Multisite Scraper Post Generator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Crawlomatic Multisite Scraper Post Generator: from n/a through 2.6.8.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/crawlomatic-multipag
lyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/crawlomatic-multipage-scraper-post-generator/vulnerability/wordpress-crawlomatic-multisite-scraper-post-generator-2-6-8-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49294 State: PUBLISHED Published: 2025-06-06T12:53:46.025Z Last Updated: 2025-06-06T19:23:22.676Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: CodeRevolution Products: Crawlomatic Multisite Scraper Post Generator Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in CodeRevolution Crawlomatic Multisite Scraper Post Generator allows Retrieve Embedded Sensitive Data. This issue affects Crawlomatic Multisite Scraper Post Generator: from n/a through 2.6.8.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/crawlomatic-multipage-sc
Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/crawlomatic-multipage-scraper-post-generator/vulnerability/wordpress-crawlomatic-multisite-scraper-post-generator-plugin-2-6-8-2-sensitive-data-exposure-via-log-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-49295 State: PUBLISHED Published: 2025-06-09T15:53:46.392Z Last Updated: 2025-06-09T19:47:34.130Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mikado-Themes Products: MediClinic Problem Types: CWE-35 Description: Path Traversal vulnerability in Mikado-Themes MediClinic allows PHP Local File Inclusion. This issue affects MediClinic: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/mediclinic/vulnerability/wordpress-mediclinic-2-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49296 State: PUBLISHED Published: 2025-06-09T15:53:45.686Z Last Updated: 2025-06-09T19:47:39.653Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mikado-Themes Products: GrandPrix Problem Types: CWE-35 Description: Path Traversal vulnerability in Mikado-Themes GrandPrix allows PHP Local File Inclusion. This issue affects GrandPrix: from n/a through 1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/grandprix/vulnerability/wordpress-grandprix-1-6-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49297 State: PUBLISHED Published: 2025-06-09T15:53:44.962Z Last Updated: 2025-06-09T17:23:43.799Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mikado-Themes Products: Grill and Chow Problem Types: CWE-35 Description: Path Traversal vulnerability in Mikado-Themes Grill and Chow allows PHP Local File Inclusion. This issue affects Grill and Chow: from n/a through 1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/grillandchow/vulnerability/wordpress-grill-and-chow-1-6-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49298 State: PUBLISHED Published: 2025-06-06T12:53:46.507Z Last Updated: 2025-06-06T19:23:17.100Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Bastien Ho Products: Event post Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post allows Stored XSS. This issue affects Event post: from n/a through 5.10.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/event-post/vulnerability/wordpress-event-post-5-10-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49299 State: PUBLISHED Published: 2025-06-06T12:53:46.964Z Last Updated: 2025-06-06T19:23:11.354Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WPlugged.com Products: WebHotelier Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPlugged.com WebHotelier allows Stored XSS. This issue affects WebHotelier: from n/a through 1.9.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/webhotelier/vulnerability/wordpress-webhotelier-1-9-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49301 State: PUBLISHED Published: 2025-06-06T12:53:47.422Z Last Updated: 2025-06-06T16:05:34.362Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: wpsoul Products: Greenshift Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift allows DOM-Based XSS. This issue affects Greenshift: from n/a through 11.5.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/greenshift-animation-and-page-builder-blocks/vulnerability/wordpress-greenshift-11-5-5-cross-site-scripting-xss-vulnerability?_s
ft-animation-and-page-builder-blocks/vulnerability/wordpress-greenshift-11-5-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49302 State: PUBLISHED Published: 2025-07-04T11:18:00.821Z Last Updated: 2025-07-07T15:00:12.206Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Scott Paterson Products: Easy Stripe Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Scott Paterson Easy Stripe allows Remote Code Inclusion. This issue affects Easy Stripe: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-stripe/vulnerability/wordpress-easy-stripe-1-1-remote-code-execution-rce-vulnerability?_s_id=cve
CVE ID: CVE-2025-49303 State: PUBLISHED Published: 2025-07-04T11:18:00.311Z Last Updated: 2025-07-07T15:00:19.642Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Shabti Kaplan Products: Frontend Admin by DynamiApps Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps allows Path Traversal. This issue affects Frontend Admin by DynamiApps: from n/a through 3.28.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-
es: - https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-3-28-7-arbitrary-file-download-vulnerability?_s_id=cve
CVE ID: CVE-2025-49304 State: PUBLISHED Published: 2025-06-06T12:53:47.873Z Last Updated: 2025-06-06T16:05:27.302Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: CodeManas Products: Search with Typesense Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeManas Search with Typesense allows Stored XSS. This issue affects Search with Typesense: from n/a through 2.0.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/search-with-typesense/vulnerability/wordpress-search-with-typesense-2-0-10-cross-site-script
m/database/wordpress/plugin/search-with-typesense/vulnerability/wordpress-search-with-typesense-2-0-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49305 State: PUBLISHED Published: 2025-06-06T12:53:48.326Z Last Updated: 2025-06-06T16:05:20.078Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: impleCode Products: Product Catalog Simple Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode Product Catalog Simple allows Stored XSS. This issue affects Product Catalog Simple: from n/a through 1.8.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/post-type-x/vulnerability/wordpress-product-catalog-simple-1-8-1-cross-site-scripting-xss-
com/database/wordpress/plugin/post-type-x/vulnerability/wordpress-product-catalog-simple-1-8-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49306 State: PUBLISHED Published: 2025-06-06T12:53:48.782Z Last Updated: 2025-06-06T16:05:12.823Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: catchsquare Products: WP Social Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget allows Stored XSS. This issue affects WP Social Widget: from n/a through 2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-social-widget/vulnerability/wordpress-wp-social-widget-2-3-cross-site-scripting-xss-vulnerability?_s_id
dpress/plugin/wp-social-widget/vulnerability/wordpress-wp-social-widget-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49307 State: PUBLISHED Published: 2025-06-06T12:53:49.237Z Last Updated: 2025-06-06T16:05:05.001Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Magazine3 Products: WP Multilang Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magazine3 WP Multilang allows PHP Local File Inclusion. This issue affects WP Multilang: from n/a through 2.4.19. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-multilang/vulnerability/wordpress-wp-multilang-2-4-19-local-file-inclusion-vulnerabil
k.com/database/wordpress/plugin/wp-multilang/vulnerability/wordpress-wp-multilang-2-4-19-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49308 State: PUBLISHED Published: 2025-06-06T12:53:49.689Z Last Updated: 2025-06-06T16:04:55.749Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: WP Travel Engine Products: WP Travel Engine Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel Engine WP Travel Engine allows PHP Local File Inclusion. This issue affects WP Travel Engine: from n/a through 6.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-travel-engine/vulnerability/wordpress-wp-travel-engine-6-5-1
nces: - https://patchstack.com/database/wordpress/plugin/wp-travel-engine/vulnerability/wordpress-wp-travel-engine-6-5-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49309 State: PUBLISHED Published: 2025-06-06T12:53:50.147Z Last Updated: 2025-06-06T16:04:49.008Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: HT Plugins Products: HT Team Member Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Team Member allows Stored XSS. This issue affects HT Team Member: from n/a through 1.1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ht-team-member/vulnerability/wordpress-ht-team-member-1-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49310 State: PUBLISHED Published: 2025-06-06T12:53:50.605Z Last Updated: 2025-06-06T16:04:41.312Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: M A Vinoth Kumar Products: Frontend Dashboard Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M A Vinoth Kumar Frontend Dashboard allows Stored XSS. This issue affects Frontend Dashboard: from n/a through 2.2.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/frontend-dashboard/vulnerability/wordpress-frontend-dashboard-2-2-8-cross-site-scripting
k.com/database/wordpress/plugin/frontend-dashboard/vulnerability/wordpress-frontend-dashboard-2-2-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49311 State: PUBLISHED Published: 2025-06-06T12:53:51.061Z Last Updated: 2025-06-06T16:04:33.645Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: CoolHappy Products: The Events Calendar Countdown Addon Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoolHappy The Events Calendar Countdown Addon allows Stored XSS. This issue affects The Events Calendar Countdown Addon: from n/a through 1.4.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/countdown-for-the-events-calendar/vulnerability/wor
ment: References: - https://patchstack.com/database/wordpress/plugin/countdown-for-the-events-calendar/vulnerability/wordpress-the-events-calendar-countdown-addon-1-4-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49312 State: PUBLISHED Published: 2025-06-17T15:01:24.280Z Last Updated: 2025-06-20T13:13:05.579Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: CodeRevolution Products: Echo RSS Feed Post Generator Plugin for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeRevolution Echo RSS Feed Post Generator Plugin for WordPress allows Reflected XSS. This issue affects Echo RSS Feed Post Generator Plugin for WordPress: from n/a through 5.4.8.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plu
5.4.8.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rss-feed-post-generator-echo/vulnerability/wordpress-echo-rss-feed-post-generator-plugin-for-wordpress-plugin-5-4-8-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49313 State: PUBLISHED Published: 2025-06-06T12:53:51.516Z Last Updated: 2025-06-06T16:04:26.057Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ovatheme Products: BRW Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme BRW allows PHP Local File Inclusion. This issue affects BRW: from n/a through 1.8.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ova-brw/vulnerability/wordpress-brw-1-8-6-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49314 State: PUBLISHED Published: 2025-06-06T12:53:51.977Z Last Updated: 2025-06-06T19:23:05.628Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: ovatheme Products: BRW Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ovatheme BRW allows Stored XSS. This issue affects BRW: from n/a through 1.8.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ova-brw/vulnerability/wordpress-brw-1-8-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49315 State: PUBLISHED Published: 2025-06-06T12:53:52.486Z Last Updated: 2025-06-06T19:22:59.565Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: PersianScript Products: Persian Woocommerce SMS Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PersianScript Persian Woocommerce SMS allows SQL Injection. This issue affects Persian Woocommerce SMS: from n/a through 7.0.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/persian-woocommerce-sms/vulnerability/wordpress-persian-woocommerce-sms-7-0-1
//patchstack.com/database/wordpress/plugin/persian-woocommerce-sms/vulnerability/wordpress-persian-woocommerce-sms-7-0-10-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-49316 State: PUBLISHED Published: 2025-06-17T15:01:23.808Z Last Updated: 2025-06-20T13:13:11.893Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Saleswonder Team Tobias Products: WP2LEADS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saleswonder Team Tobias WP2LEADS allows Reflected XSS. This issue affects WP2LEADS: from n/a through 3.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp2leads/vulnerability/wordpress-wp2leads-plugin-3-5-0-reflected-cross-site-scripting-xss-vulnerability
wordpress/plugin/wp2leads/vulnerability/wordpress-wp2leads-plugin-3-5-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve