Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-52802 State: PUBLISHED Published: 2025-06-20T15:03:39.682Z Last Updated: 2025-06-23T16:22:26.949Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: enguerranws Products: Import YouTube videos as WP Posts Problem Types: CWE-862 Description: Missing Authorization vulnerability in enguerranws Import YouTube videos as WP Posts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Import YouTube videos as WP Posts: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/import-youtube-videos-as-wp-post/vulnerability/wordpress-import-y
es: - https://patchstack.com/database/wordpress/plugin/import-youtube-videos-as-wp-post/vulnerability/wordpress-import-youtube-videos-as-wp-posts-plugin-2-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-52803 State: PUBLISHED Published: 2025-07-16T11:27:54.296Z Last Updated: 2025-07-16T14:17:41.650Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: uxper Products: Sala Problem Types: CWE-862 Description: Missing Authorization vulnerability in uxper Sala allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sala: from n/a through 1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/sala/vulnerability/wordpress-sala-1-1-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-52804 State: PUBLISHED Published: 2025-07-16T11:27:53.783Z Last Updated: 2025-07-16T14:20:40.957Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: uxper Products: Nuss Problem Types: CWE-862 Description: Missing Authorization vulnerability in uxper Nuss allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Nuss: from n/a through 1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/nuss/vulnerability/wordpress-nuss-1-3-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-52805 State: PUBLISHED Published: 2025-07-04T11:17:54.954Z Last Updated: 2025-07-07T16:26:47.080Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: VaultDweller Products: Leyka Problem Types: CWE-35 Description: Path Traversal vulnerability in VaultDweller Leyka allows PHP Local File Inclusion. This issue affects Leyka: from n/a through 3.31.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/leyka/vulnerability/wordpress-leyka-3-31-9-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52806 State: PUBLISHED Published: 2025-08-14T10:33:57.075Z Last Updated: 2025-08-14T14:48:19.310Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: eyecix Products: JobSearch Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in eyecix JobSearch allows PHP Local File Inclusion. This issue affects JobSearch: from n/a through 2.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-jobsearch/vulnerability/wordpress-jobsearch-plugin-2-9-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52807 State: PUBLISHED Published: 2025-07-04T11:17:54.384Z Last Updated: 2025-07-07T16:27:05.578Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ApusWP Products: Kossy - Minimalist eCommerce WordPress Theme Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusWP Kossy - Minimalist eCommerce WordPress Theme allows PHP Local File Inclusion. This issue affects Kossy - Minimalist eCommerce WordPress Theme: from n/a through 1.45. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/k
1.45. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/kossy/vulnerability/wordpress-kossy-minimalist-ecommerce-wordpress-theme-1-45-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52808 State: PUBLISHED Published: 2025-06-27T11:52:22.035Z Last Updated: 2025-06-27T13:10:28.087Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: real-web Products: RealtyElite Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in real-web RealtyElite allows PHP Local File Inclusion. This issue affects RealtyElite: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/realtyelite/vulnerability/wordpress-realtyelite-1-0-0-local-file-inclusion-vulnerability?_s_id=
database/wordpress/theme/realtyelite/vulnerability/wordpress-realtyelite-1-0-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52809 State: PUBLISHED Published: 2025-06-27T11:52:21.393Z Last Updated: 2025-06-27T14:48:15.310Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: John Russell Products: National Weather Service Alerts Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in John Russell National Weather Service Alerts allows PHP Local File Inclusion. This issue affects National Weather Service Alerts: from n/a through 1.3.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/national-weather-service-a
otes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/national-weather-service-alerts/vulnerability/wordpress-national-weather-service-alerts-1-3-5-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52810 State: PUBLISHED Published: 2025-06-27T11:52:20.816Z Last Updated: 2025-06-27T14:50:49.106Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TMRW-studio Products: Katerio - Magazine Problem Types: CWE-35 Description: Path Traversal vulnerability in TMRW-studio Katerio - Magazine allows PHP Local File Inclusion. This issue affects Katerio - Magazine: from n/a through 1.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/katerio/vulnerability/wordpress-katerio-magazine-1-5-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52811 State: PUBLISHED Published: 2025-06-27T11:52:20.208Z Last Updated: 2025-06-27T14:33:21.983Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Creanncy Products: Davenport - Versatile Blog and Magazine WordPress Theme Problem Types: CWE-35 Description: Path Traversal vulnerability in Creanncy Davenport - Versatile Blog and Magazine WordPress Theme allows PHP Local File Inclusion. This issue affects Davenport - Versatile Blog and Magazine WordPress Theme: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/davenport/vulnerability/wordpress-davenport-versatile
nt: References: - https://patchstack.com/database/wordpress/plugin/davenport/vulnerability/wordpress-davenport-versatile-blog-and-magazine-wordpress-theme-1-3-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52812 State: PUBLISHED Published: 2025-06-27T11:52:19.570Z Last Updated: 2025-06-27T14:50:59.393Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ApusWP Products: Domnoo Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusWP Domnoo allows PHP Local File Inclusion. This issue affects Domnoo: from n/a through 1.49. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/domnoo/vulnerability/wordpress-domnoo-1-49-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52813 State: PUBLISHED Published: 2025-07-04T11:17:53.778Z Last Updated: 2025-07-07T16:27:26.049Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: pietro Products: MobiLoud Problem Types: CWE-862 Description: Missing Authorization vulnerability in pietro MobiLoud allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MobiLoud: from n/a through 4.6.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mobiloud-mobile-app-plugin/vulnerability/wordpress-mobiloud-4-6-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-52814 State: PUBLISHED Published: 2025-06-27T11:52:18.876Z Last Updated: 2025-06-27T13:10:51.766Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ovatheme Products: BRW Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme BRW allows PHP Local File Inclusion. This issue affects BRW: from n/a through 1.7.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ova-brw/vulnerability/wordpress-brw-1-7-9-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52815 State: PUBLISHED Published: 2025-06-27T11:52:18.272Z Last Updated: 2025-06-27T13:11:10.596Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AncoraThemes Products: CityGov Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes CityGov allows PHP Local File Inclusion. This issue affects CityGov: from n/a through 1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/citygov/vulnerability/wordpress-citygov-1-9-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52816 State: PUBLISHED Published: 2025-06-27T11:52:17.658Z Last Updated: 2025-06-27T13:11:30.794Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: themehunk Products: Zita Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themehunk Zita allows PHP Local File Inclusion. This issue affects Zita: from n/a through 1.6.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/zita/vulnerability/wordpress-zita-1-6-5-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52817 State: PUBLISHED Published: 2025-06-27T11:52:17.090Z Last Updated: 2025-06-27T13:11:51.218Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: ZealousWeb Products: Abandoned Contact Form 7 Problem Types: CWE-862 Description: Missing Authorization vulnerability in ZealousWeb Abandoned Contact Form 7 allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Abandoned Contact Form 7: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/abandoned-contact-form-7/vulnerability/wordpress-abandoned-contact-form-7-2-0-broken-access-co
database/wordpress/plugin/abandoned-contact-form-7/vulnerability/wordpress-abandoned-contact-form-7-2-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-52818 State: PUBLISHED Published: 2025-06-27T11:52:16.472Z Last Updated: 2025-06-27T13:14:08.327Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Dejan Jasnic Products: Trusty Whistleblowing Problem Types: CWE-862 Description: Missing Authorization vulnerability in Dejan Jasnic Trusty Whistleblowing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Trusty Whistleblowing: from n/a through 1.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/trusty-whistleblowing-solution/vulnerability/wordpress-trusty-whistleblowing-1-5-2-broken-access-
abase/wordpress/plugin/trusty-whistleblowing-solution/vulnerability/wordpress-trusty-whistleblowing-1-5-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-52819 State: PUBLISHED Published: 2025-07-16T11:27:53.288Z Last Updated: 2025-07-16T14:24:55.119Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: pakkemx Products: Pakke Envíos Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in pakkemx Pakke Envíos allows SQL Injection. This issue affects Pakke Envíos: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pakke/vulnerability/wordpress-pakke-envios-1-0-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52820 State: PUBLISHED Published: 2025-08-14T10:33:56.543Z Last Updated: 2025-08-14T14:48:30.991Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: infosoftplugin Products: WooCommerce Point Of Sale (POS) Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in infosoftplugin WooCommerce Point Of Sale (POS) allows SQL Injection. This issue affects WooCommerce Point Of Sale (POS): from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woo-point-of-salepos/vulnerability/wordpress-woocommer
t: References: - https://patchstack.com/database/wordpress/plugin/woo-point-of-salepos/vulnerability/wordpress-woocommerce-point-of-sale-pos-1-4-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52821 State: PUBLISHED Published: 2025-06-20T15:03:39.230Z Last Updated: 2025-06-23T16:22:32.396Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: thanhtungtnt Products: Video List Manager Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in thanhtungtnt Video List Manager allows SQL Injection. This issue affects Video List Manager: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/video-list-manager/vulnerability/wordpress-video-list-manager-plugin-1-7-sql-injection-vulnerabil
abase/wordpress/plugin/video-list-manager/vulnerability/wordpress-video-list-manager-plugin-1-7-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52822 State: PUBLISHED Published: 2025-06-20T15:03:38.743Z Last Updated: 2025-06-23T16:22:38.071Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Iqonic Design Products: WP Roadmap Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design WP Roadmap allows SQL Injection. This issue affects WP Roadmap: from n/a through 2.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-roadmap/vulnerability/wordpress-wp-roadmap-plugin-2-1-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52823 State: PUBLISHED Published: 2025-08-14T10:33:55.958Z Last Updated: 2025-08-14T14:48:37.712Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: ovatheme Products: Cube Portfolio Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ovatheme Cube Portfolio allows SQL Injection. This issue affects Cube Portfolio: from n/a through 1.16.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cubeportfolio/vulnerability/wordpress-cube-portfolio-plugin-1-16-8-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52824 State: PUBLISHED Published: 2025-06-27T11:52:15.877Z Last Updated: 2025-06-27T13:14:27.833Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: MDJM Products: Mobile DJ Manager Problem Types: CWE-862 Description: Missing Authorization vulnerability in MDJM Mobile DJ Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mobile DJ Manager: from n/a through 1.7.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mobile-dj-manager/vulnerability/wordpress-mobile-dj-manager-1-7-6-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-52825 State: PUBLISHED Published: 2025-06-20T15:03:38.280Z Last Updated: 2025-06-23T16:22:43.945Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Rameez Iqbal Products: Real Estate Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Rameez Iqbal Real Estate Manager allows Privilege Escalation. This issue affects Real Estate Manager: from n/a through 7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/real-estate-manager/vulnerability/wordpress-real-estate-manager-plugin-7-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52826 State: PUBLISHED Published: 2025-06-27T11:52:15.291Z Last Updated: 2025-06-27T14:07:48.652Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: uxper Products: Sala Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in uxper Sala allows Object Injection. This issue affects Sala: from n/a through 1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/sala/vulnerability/wordpress-sala-1-1-3-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52827 State: PUBLISHED Published: 2025-06-27T11:52:14.560Z Last Updated: 2025-06-27T14:07:55.722Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: uxper Products: Nuss Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in uxper Nuss allows Object Injection. This issue affects Nuss: from n/a through 1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/nuss/vulnerability/wordpress-nuss-1-3-3-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52828 State: PUBLISHED Published: 2025-07-04T11:17:53.262Z Last Updated: 2025-07-07T15:00:45.483Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: designthemes Products: Red Art Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in designthemes Red Art allows Object Injection. This issue affects Red Art: from n/a through 3.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/redart/vulnerability/wordpress-red-art-3-7-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52829 State: PUBLISHED Published: 2025-06-27T11:52:13.952Z Last Updated: 2025-06-27T13:42:54.971Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: DirectIQ Products: DirectIQ Email Marketing Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DirectIQ DirectIQ Email Marketing allows SQL Injection. This issue affects DirectIQ Email Marketing: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/directiq-wp/vulnerability/wordpress-directiq-email-marketing-2-0-sql-injection-vuln
hstack.com/database/wordpress/plugin/directiq-wp/vulnerability/wordpress-directiq-email-marketing-2-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52830 State: PUBLISHED Published: 2025-07-04T11:17:52.757Z Last Updated: 2025-07-07T15:00:51.956Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: bsecuretech Products: bSecure &#8211; Your Universal Checkout Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bsecuretech bSecure &#8211; Your Universal Checkout allows Blind SQL Injection. This issue affects bSecure &#8211; Your Universal Checkout: from n/a through 1.7.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bsecure/vulnerability/wo
Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bsecure/vulnerability/wordpress-bsecure-your-universal-checkout-1-7-9-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52831 State: PUBLISHED Published: 2025-07-04T11:17:52.250Z Last Updated: 2025-07-07T15:00:58.364Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: thanhtungtnt Products: Video List Manager Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in thanhtungtnt Video List Manager allows SQL Injection. This issue affects Video List Manager: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/video-list-manager/vulnerability/wordpress-video-list-manager-1-7-sql-injection-vulnerability
/database/wordpress/plugin/video-list-manager/vulnerability/wordpress-video-list-manager-1-7-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52832 State: PUBLISHED Published: 2025-07-04T11:17:51.739Z Last Updated: 2025-07-07T15:01:06.943Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: wpo-HR Products: NGG Smart Image Search Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpo-HR NGG Smart Image Search allows SQL Injection. This issue affects NGG Smart Image Search: from n/a through 3.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ngg-smart-image-search/vulnerability/wordpress-ngg-smart-image-search-3-4-1-sql-injection-v
om/database/wordpress/plugin/ngg-smart-image-search/vulnerability/wordpress-ngg-smart-image-search-3-4-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52833 State: PUBLISHED Published: 2025-07-04T11:17:51.226Z Last Updated: 2025-07-07T15:01:13.385Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: designthemes Products: LMS Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in designthemes LMS allows SQL Injection. This issue affects LMS: from n/a through 9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/lms/vulnerability/wordpress-lms-9-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52834 State: PUBLISHED Published: 2025-06-27T11:52:13.285Z Last Updated: 2025-06-27T13:43:01.079Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: favethemes Products: Homey Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in favethemes Homey allows SQL Injection. This issue affects Homey: from n/a through 2.4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/homey/vulnerability/wordpress-homey-2-4-5-sql-injection-vulnerability?_s_id=cve