Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-58835 State: PUBLISHED Published: 2025-09-05T13:45:26.626Z Last Updated: 2025-09-05T19:40:38.362Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: calliko Products: Bonus for Woo Problem Types: CWE-1284 Description: Improper Validation of Specified Quantity in Input vulnerability in calliko Bonus for Woo allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Bonus for Woo: from n/a through 7.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bonus-for-woo/vulnerability/wordpress-bonus-for-woo-plugin-7-4-1-other-vulnerability-type-vulnerability?_s_
press/plugin/bonus-for-woo/vulnerability/wordpress-bonus-for-woo-plugin-7-4-1-other-vulnerability-type-vulnerability?_s_id=cve
CVE ID: CVE-2025-58836 State: PUBLISHED Published: 2025-09-05T13:45:27.140Z Last Updated: 2025-09-05T19:41:16.193Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Tikolan Products: FW Anker Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tikolan FW Anker allows Stored XSS. This issue affects FW Anker: from n/a through 1.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fw-anker/vulnerability/wordpress-fw-anker-plugin-1-2-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58837 State: PUBLISHED Published: 2025-09-05T13:45:27.719Z Last Updated: 2025-09-05T19:41:56.659Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Shiful H Products: SS Font Awesome Icon Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shiful H SS Font Awesome Icon allows Stored XSS. This issue affects SS Font Awesome Icon: from n/a through 4.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ss-font-awesome-icon/vulnerability/wordpress-ss-font-awesome-icon-plugin-4-1-3-cross-site-scriptin
base/wordpress/plugin/ss-font-awesome-icon/vulnerability/wordpress-ss-font-awesome-icon-plugin-4-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58838 State: PUBLISHED Published: 2025-09-05T13:45:28.349Z Last Updated: 2025-09-05T19:43:19.096Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Zakir Products: Smooth Accordion Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zakir Smooth Accordion allows Stored XSS. This issue affects Smooth Accordion: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smooth-accordion/vulnerability/wordpress-smooth-accordion-plugin-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58839 State: PUBLISHED Published: 2025-09-05T13:45:28.880Z Last Updated: 2025-09-05T19:44:08.896Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: aThemeArt Translations Products: eDS Responsive Menu Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in aThemeArt Translations eDS Responsive Menu allows Object Injection. This issue affects eDS Responsive Menu: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/eds-responsive-menu/vulnerability/wordpress-eds-responsive-menu-plugin-1-2-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-58840 State: PUBLISHED Published: 2025-09-05T13:45:29.399Z Last Updated: 2025-09-05T15:36:44.426Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Ibnul H. Products: Custom Team Manager Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ibnul H. Custom Team Manager allows Stored XSS. This issue affects Custom Team Manager: from n/a through 2.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-team-manager/vulnerability/wordpress-custom-team-manager-plugin-2-4-2-cross-site-scripting-xss
e/wordpress/plugin/custom-team-manager/vulnerability/wordpress-custom-team-manager-plugin-2-4-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58841 State: PUBLISHED Published: 2025-09-05T13:45:29.929Z Last Updated: 2025-09-05T15:36:23.005Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H) Vendors: John Luetke Products: Media Author Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in John Luetke Media Author allows Privilege Escalation. This issue affects Media Author: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/media-author/vulnerability/wordpress-media-author-plugin-1-0-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58842 State: PUBLISHED Published: 2025-09-05T13:45:30.510Z Last Updated: 2025-09-05T15:36:07.074Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: givecloud Products: Donation Forms WP by Givecloud Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in givecloud Donation Forms WP by Givecloud allows Stored XSS. This issue affects Donation Forms WP by Givecloud: from n/a through 1.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/donation-forms-by-givecloud/vulnerability/wordpress-donation-forms
s: - https://patchstack.com/database/wordpress/plugin/donation-forms-by-givecloud/vulnerability/wordpress-donation-forms-wp-by-givecloud-plugin-1-0-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58843 State: PUBLISHED Published: 2025-09-05T13:45:31.044Z Last Updated: 2025-09-05T15:21:42.778Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: David Merinas Products: Auto Last Youtube Video Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in David Merinas Auto Last Youtube Video allows Stored XSS. This issue affects Auto Last Youtube Video: from n/a through 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/auto-last-youtube-video/vulnerability/wordpress-auto-last-youtube-video-plugin-1-0-7-cross-site-request-forgery-csrf-vulnerability?
outube-video/vulnerability/wordpress-auto-last-youtube-video-plugin-1-0-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58844 State: PUBLISHED Published: 2025-09-05T13:45:31.561Z Last Updated: 2025-09-05T15:17:42.898Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Subhash Kumar Products: Database to Excel Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Subhash Kumar Database to Excel allows Stored XSS. This issue affects Database to Excel: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/database-to-excel/vulnerability/wordpress-database-to-excel-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58845 State: PUBLISHED Published: 2025-09-05T13:45:32.083Z Last Updated: 2025-09-05T15:17:18.907Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ChrisHurst Products: Bulk Watermark Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ChrisHurst Bulk Watermark allows Reflected XSS. This issue affects Bulk Watermark: from n/a through 1.6.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bulk-watermark/vulnerability/wordpress-bulk-watermark-plugin-1-6-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58846 State: PUBLISHED Published: 2025-09-05T13:45:32.601Z Last Updated: 2025-09-05T15:16:58.751Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Dejan Markovic Products: WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Dejan Markovic WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule allows Reflected XSS. This issue affects WordPress Buffer – HYPESocial. Social Media Auto Post, Social Media Auto Publish and Schedule: from n/a through 2020.1.0. Additional Analyst Notes: -
. Social Media Auto Post, Social Media Auto Publish and Schedule: from n/a through 2020.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/buffer-my-post/vulnerability/wordpress-wordpress-buffer-hypesocial-social-media-auto-post-social-media-auto-publish-and-schedule-plugin-2020-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58847 State: PUBLISHED Published: 2025-09-05T13:45:33.129Z Last Updated: 2025-09-05T14:44:16.954Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Yaidier Products: WN Flipbox Pro Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Yaidier WN Flipbox Pro allows Reflected XSS. This issue affects WN Flipbox Pro: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wn-flipbox-pro/vulnerability/wordpress-wn-flipbox-pro-plugin-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58848 State: PUBLISHED Published: 2025-09-05T13:45:33.643Z Last Updated: 2025-09-05T14:43:56.999Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: aakash1911 Products: WP likes Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in aakash1911 WP likes allows Reflected XSS. This issue affects WP likes: from n/a through 3.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-likes/vulnerability/wordpress-wp-likes-plugin-3-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58849 State: PUBLISHED Published: 2025-09-05T13:45:34.165Z Last Updated: 2025-09-05T14:43:38.694Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Deepak S Products: Hide Real Download Path Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Deepak S Hide Real Download Path allows Stored XSS. This issue affects Hide Real Download Path: from n/a through 1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hide-real-download-path/vulnerability/wordpress-hide-real-download-path-plugin-1-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58850 State: PUBLISHED Published: 2025-09-05T13:45:34.689Z Last Updated: 2025-09-05T14:42:46.621Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: marcshowpass Products: Showpass WordPress Extension Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in marcshowpass Showpass WordPress Extension allows Stored XSS. This issue affects Showpass WordPress Extension: from n/a through 4.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/showpass/vulnerability/wordpress-showpass-wordpress-extension-plug
s: - https://patchstack.com/database/wordpress/plugin/showpass/vulnerability/wordpress-showpass-wordpress-extension-plugin-4-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58851 State: PUBLISHED Published: 2025-09-05T13:45:35.217Z Last Updated: 2025-09-05T19:46:45.366Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: DigitalCourt Products: Boxed Content Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DigitalCourt Boxed Content allows Stored XSS. This issue affects Boxed Content: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/boxed-content/vulnerability/wordpress-boxed-content-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58852 State: PUBLISHED Published: 2025-09-05T13:45:35.725Z Last Updated: 2025-09-05T19:47:50.229Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Mark O'Donnell Products: MSTW League Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mark O'Donnell MSTW League Manager allows Stored XSS. This issue affects MSTW League Manager: from n/a through 2.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mstw-league-manager/vulnerability/wordpress-mstw-league-manager-plugin-2-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58853 State: PUBLISHED Published: 2025-09-05T13:45:36.247Z Last Updated: 2025-09-05T19:48:50.283Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: OTWthemes Products: Popping Sidebars and Widgets Light Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Popping Sidebars and Widgets Light allows Reflected XSS. This issue affects Popping Sidebars and Widgets Light: from n/a through 1.27. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/popping-sidebars-and-widgets-light/vulnerability/wordpress-popping-sidebars-and-widgets-light-plugin-1-2
ordpress/plugin/popping-sidebars-and-widgets-light/vulnerability/wordpress-popping-sidebars-and-widgets-light-plugin-1-27-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58854 State: PUBLISHED Published: 2025-09-05T13:45:36.764Z Last Updated: 2025-09-05T19:49:30.378Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Samer Bechara Products: Ultimate AJAX Login Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Samer Bechara Ultimate AJAX Login allows Reflected XSS. This issue affects Ultimate AJAX Login: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ultimate-ajax-login/vulnerability/wordpress-ultimate-ajax-login-plugin-1-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58855 State: PUBLISHED Published: 2025-09-05T13:45:37.288Z Last Updated: 2025-09-05T19:50:02.526Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Denis V (Artprima) Products: AP HoneyPot WordPress Plugin Problem Types: CWE-1236 Description: Improper Neutralization of Formula Elements in a CSV File vulnerability in Denis V (Artprima) AP HoneyPot WordPress Plugin allows Reflected XSS. This issue affects AP HoneyPot WordPress Plugin: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ap-honeypot/vulnerability/wordpress-ap-honeypot-wordpress-plugin-plugin-1-4-cros
atchstack.com/database/wordpress/plugin/ap-honeypot/vulnerability/wordpress-ap-honeypot-wordpress-plugin-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58856 State: PUBLISHED Published: 2025-09-05T13:45:37.815Z Last Updated: 2025-09-05T19:50:39.153Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: ablancodev Products: Woocommerce Notify Updated Product Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ablancodev Woocommerce Notify Updated Product allows Stored XSS. This issue affects Woocommerce Notify Updated Product: from n/a through 1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-notify-updated-product/vulnerability/wordpress-woocommerce-notify-updated-product-plugin-1-6
ordpress/plugin/woocommerce-notify-updated-product/vulnerability/wordpress-woocommerce-notify-updated-product-plugin-1-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58857 State: PUBLISHED Published: 2025-09-05T13:45:38.350Z Last Updated: 2025-09-05T19:51:20.290Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: KaizenCoders Products: Table of content Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders Table of content allows Stored XSS. This issue affects Table of content: from n/a through 1.5.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/content-table/vulnerability/wordpress-table-of-content-plugin-1-5-3-1-cross-site-request-forgery-csrf-
/wordpress/plugin/content-table/vulnerability/wordpress-table-of-content-plugin-1-5-3-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58858 State: PUBLISHED Published: 2025-09-05T13:45:38.876Z Last Updated: 2025-09-05T19:52:05.724Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WPBean Products: WPB Image Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBean WPB Image Widget allows Stored XSS. This issue affects WPB Image Widget: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpb-image-widget/vulnerability/wordpress-wpb-image-widget-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cv
gin/wpb-image-widget/vulnerability/wordpress-wpb-image-widget-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58859 State: PUBLISHED Published: 2025-09-05T13:45:39.384Z Last Updated: 2025-09-05T14:42:24.873Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: David Merinas Products: Add to Feedly Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in David Merinas Add to Feedly allows Stored XSS. This issue affects Add to Feedly: from n/a through 1.2.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/add-to-feedly/vulnerability/wordpress-add-to-feedly-plugin-1-2-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58860 State: PUBLISHED Published: 2025-09-05T13:45:39.883Z Last Updated: 2025-09-05T14:42:00.704Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: KaizenCoders Products: Enable Latex Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in KaizenCoders Enable Latex allows Stored XSS. This issue affects Enable Latex: from n/a through 1.2.16. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/enable-latex/vulnerability/wordpress-enable-latex-plugin-1-2-16-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58861 State: PUBLISHED Published: 2025-09-05T13:45:40.419Z Last Updated: 2025-09-05T14:39:31.435Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Corner Products: Quick Event Calendar Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Corner Quick Event Calendar allows Stored XSS. This issue affects Quick Event Calendar: from n/a through 1.4.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/quick-event-calendar/vulnerability/wordpress-quick-event-calendar-plugin-1-4-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58862 State: PUBLISHED Published: 2025-09-05T13:45:40.941Z Last Updated: 2025-09-05T14:38:17.924Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: George Sexton Products: WordPress Events Calendar Plugin – connectDaily Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in George Sexton WordPress Events Calendar Plugin – connectDaily allows Stored XSS. This issue affects WordPress Events Calendar Plugin – connectDaily: from n/a through 1.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/connect
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/connect-daily-web-calendar/vulnerability/wordpress-wordpress-events-calendar-plugin-connectdaily-plugin-1-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58863 State: PUBLISHED Published: 2025-09-05T13:45:41.469Z Last Updated: 2025-09-05T14:37:51.078Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: SdeWijs Products: Zoomify embed for WP Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SdeWijs Zoomify embed for WP allows Stored XSS. This issue affects Zoomify embed for WP: from n/a through 1.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/zoom-image-shortcode/vulnerability/wordpress-zoomify-embed-for-wp-plugin-1-5-2-cross-site-scripting-
se/wordpress/plugin/zoom-image-shortcode/vulnerability/wordpress-zoomify-embed-for-wp-plugin-1-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58864 State: PUBLISHED Published: 2025-09-05T13:45:41.996Z Last Updated: 2025-09-05T14:36:15.665Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: iamroody Products: 金数据 Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iamroody 金数据 allows Stored XSS. This issue affects 金数据: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/jinshuju/vulnerability/wordpress-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58865 State: PUBLISHED Published: 2025-09-05T13:45:42.518Z Last Updated: 2025-09-05T14:35:05.828Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: reimund Products: Compact Admin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in reimund Compact Admin allows Cross Site Request Forgery. This issue affects Compact Admin: from n/a through 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/compact-admin/vulnerability/wordpress-compact-admin-plugin-1-3-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve