Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-32144 State: PUBLISHED Published: 2025-04-11T08:42:51.450Z Last Updated: 2025-04-11T13:53:46.132Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: PickPlugins Products: Job Board Manager Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in PickPlugins Job Board Manager allows Object Injection. This issue affects Job Board Manager: from n/a through 2.1.60. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/job-board-manager/vulnerability/wordpress-job-board-manager-plugin-2-1-60-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32145 State: PUBLISHED Published: 2025-04-10T08:09:42.557Z Last Updated: 2025-04-10T14:01:37.213Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: magepeopleteam Products: WpEvently Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently allows Object Injection. This issue affects WpEvently: from n/a through 4.3.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mage-eventpress/vulnerability/wordpress-wpevently-plugin-4-3-5-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32146 State: PUBLISHED Published: 2025-04-04T15:58:34.392Z Last Updated: 2025-04-04T20:17:49.776Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: JoomSky Products: JS Job Manager Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager allows PHP Local File Inclusion. This issue affects JS Job Manager: from n/a through 2.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/js-jobs/vulnerability/wordpress-js-job-manager-plugin-2-0-2-local-file-inclusion-vulner
ck.com/database/wordpress/plugin/js-jobs/vulnerability/wordpress-js-job-manager-plugin-2-0-2-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32147 State: PUBLISHED Published: 2025-04-04T15:58:35.054Z Last Updated: 2025-04-04T20:17:43.508Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: coothemes Products: Easy WP Optimizer Problem Types: CWE-862 Description: Missing Authorization vulnerability in coothemes Easy WP Optimizer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Easy WP Optimizer: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-wp-optimizer/vulnerability/wordpress-easy-wp-optimizer-plugin-1-1-0-broken-access-control-vulnerability?_s_id=
ugin/easy-wp-optimizer/vulnerability/wordpress-easy-wp-optimizer-plugin-1-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-32148 State: PUBLISHED Published: 2025-04-04T15:58:35.750Z Last Updated: 2025-04-04T20:17:36.504Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Daisycon Products: Daisycon prijsvergelijkers Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daisycon Daisycon prijsvergelijkers allows SQL Injection. This issue affects Daisycon prijsvergelijkers: from n/a through 4.8.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/daisycon/vulnerability/wordpress-daisycon-prijsvergelijkers-plugin-4-8-4-sql-in
patchstack.com/database/wordpress/plugin/daisycon/vulnerability/wordpress-daisycon-prijsvergelijkers-plugin-4-8-4-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32149 State: PUBLISHED Published: 2025-04-04T15:58:36.438Z Last Updated: 2025-04-04T20:17:29.906Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: winkm89 Products: teachPress Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in winkm89 teachPress allows SQL Injection. This issue affects teachPress: from n/a through 9.0.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/teachpress/vulnerability/wordpress-teachpress-plugin-9-0-11-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32150 State: PUBLISHED Published: 2025-04-04T15:58:37.049Z Last Updated: 2025-04-04T20:17:23.271Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Rameez Iqbal Products: Real Estate Manager Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Rameez Iqbal Real Estate Manager allows PHP Local File Inclusion. This issue affects Real Estate Manager: from n/a through 7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/real-estate-manager/vulnerability/wordpress-real-estate-manager-
ces: - https://patchstack.com/database/wordpress/plugin/real-estate-manager/vulnerability/wordpress-real-estate-manager-plugin-7-3-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32151 State: PUBLISHED Published: 2025-04-04T15:58:37.665Z Last Updated: 2025-04-04T20:17:15.270Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Sven Lehnert Products: BuddyForms Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Sven Lehnert BuddyForms allows PHP Local File Inclusion. This issue affects BuddyForms: from n/a through 2.8.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/buddyforms/vulnerability/wordpress-buddyforms-plugin-2-8-15-local-file-inclusion-vulnera
k.com/database/wordpress/plugin/buddyforms/vulnerability/wordpress-buddyforms-plugin-2-8-15-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32152 State: PUBLISHED Published: 2025-04-04T15:58:38.379Z Last Updated: 2025-05-13T03:42:29.186Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Essential Plugins by WP OnlineSupport Products: Slider a SlidersPack Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Essential Plugins by WP OnlineSupport Slider a SlidersPack allows PHP Local File Inclusion. This issue affects Slider a SlidersPack: from n/a through 2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sliderspack
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sliderspack-all-in-one-image-sliders/vulnerability/wordpress-slider-a-sliderspack-plugin-2-3-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32153 State: PUBLISHED Published: 2025-04-04T15:58:39.022Z Last Updated: 2025-04-04T20:17:01.127Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: vinagecko Products: VG WooCarousel Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in vinagecko VG WooCarousel allows PHP Local File Inclusion. This issue affects VG WooCarousel: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/vg-woocarousel/vulnerability/wordpress-vg-woocarousel-plugin-1-3-local-file-inclusion
tack.com/database/wordpress/plugin/vg-woocarousel/vulnerability/wordpress-vg-woocarousel-plugin-1-3-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32154 State: PUBLISHED Published: 2025-04-04T15:58:39.687Z Last Updated: 2025-04-04T20:16:53.900Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Catch Themes Products: Catch Dark Mode Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Catch Themes Catch Dark Mode allows PHP Local File Inclusion. This issue affects Catch Dark Mode: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/catch-dark-mode/vulnerability/wordpress-catch-dark-mode-plugin-1-2-1-local
ps://patchstack.com/database/wordpress/plugin/catch-dark-mode/vulnerability/wordpress-catch-dark-mode-plugin-1-2-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32155 State: PUBLISHED Published: 2025-04-04T15:58:40.397Z Last Updated: 2025-04-04T20:16:46.545Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: markkinchin Products: Beds24 Online Booking Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in markkinchin Beds24 Online Booking allows PHP Local File Inclusion. This issue affects Beds24 Online Booking: from n/a through 2.0.26. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/beds24-online-booking/vulnerability/wordpress-beds24-onli
References: - https://patchstack.com/database/wordpress/plugin/beds24-online-booking/vulnerability/wordpress-beds24-online-booking-plugin-2-0-26-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32156 State: PUBLISHED Published: 2025-04-04T15:58:41.127Z Last Updated: 2025-04-04T20:16:37.747Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Alex Prokopenko / JustCoded Products: Just Post Preview Widget Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Alex Prokopenko / JustCoded Just Post Preview Widget allows PHP Local File Inclusion. This issue affects Just Post Preview Widget: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/just-post-preview
Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/just-post-preview/vulnerability/wordpress-just-post-preview-widget-plugin-1-1-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32157 State: PUBLISHED Published: 2025-04-04T15:58:41.761Z Last Updated: 2025-04-04T20:16:30.775Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Jakub Glos Products: Sparkle Elementor Kit Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Jakub Glos Sparkle Elementor Kit allows PHP Local File Inclusion. This issue affects Sparkle Elementor Kit: from n/a through 2.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sparkle-elementor-kit/vulnerability/wordpress-sparkle-elemen
erences: - https://patchstack.com/database/wordpress/plugin/sparkle-elementor-kit/vulnerability/wordpress-sparkle-elementor-kit-plugin-2-0-9-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32158 State: PUBLISHED Published: 2025-04-10T08:09:42.747Z Last Updated: 2025-04-10T14:07:22.591Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: aThemes Products: aThemes Addons for Elementor Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in aThemes aThemes Addons for Elementor. This issue affects aThemes Addons for Elementor: from n/a through 1.0.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/athemes-addons-for-elementor-lite/vulnerability/wordpress-athemes-addons-for
://patchstack.com/database/wordpress/plugin/athemes-addons-for-elementor-lite/vulnerability/wordpress-athemes-addons-for-elementor-plugin-1-0-15-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32159 State: PUBLISHED Published: 2025-04-04T15:58:42.442Z Last Updated: 2025-04-04T20:16:23.521Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: RadiusTheme Products: Radius Blocks Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Radius Blocks allows PHP Local File Inclusion. This issue affects Radius Blocks: from n/a through 2.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/radius-blocks/vulnerability/wordpress-radius-blocks-plugin-2-2-1-local-file-inclus
chstack.com/database/wordpress/plugin/radius-blocks/vulnerability/wordpress-radius-blocks-plugin-2-2-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32160 State: PUBLISHED Published: 2025-04-10T08:09:43.277Z Last Updated: 2025-04-10T14:22:54.949Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Ashan Perera Products: EventON Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ashan Perera EventON. This issue affects EventON: from n/a through 2.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/eventon-lite/vulnerability/wordpress-eventon-plugin-2-3-2-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32161 State: PUBLISHED Published: 2025-04-04T15:58:43.130Z Last Updated: 2025-04-04T20:16:15.617Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Ryo Products: Arkhe Blocks Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryo Arkhe Blocks allows Stored XSS. This issue affects Arkhe Blocks: from n/a through 2.27.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/arkhe-blocks/vulnerability/wordpress-arkhe-blocks-2-27-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32162 State: PUBLISHED Published: 2025-04-04T15:58:43.903Z Last Updated: 2025-04-04T20:16:07.664Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Morgan Kay Products: Chamber Dashboard Business Directory Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Morgan Kay Chamber Dashboard Business Directory allows DOM-Based XSS. This issue affects Chamber Dashboard Business Directory: from n/a through 3.3.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/chamber-dashboard-business-directory/vulne
Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/chamber-dashboard-business-directory/vulnerability/wordpress-chamber-dashboard-business-directory-plugin-3-3-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32163 State: PUBLISHED Published: 2025-04-04T15:58:44.575Z Last Updated: 2025-04-04T20:15:59.486Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Xpro Products: Xpro Elementor Addons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS. This issue affects Xpro Elementor Addons: from n/a through 1.4.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/xpro-elementor-addons/vulnerability/wordpress-xpro-elementor-addons-plugin-1-4-9-cross-site-scripting-x
wordpress/plugin/xpro-elementor-addons/vulnerability/wordpress-xpro-elementor-addons-plugin-1-4-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32164 State: PUBLISHED Published: 2025-04-08T16:59:34.230Z Last Updated: 2025-04-09T13:24:21.613Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: maennchen1.de Products: m1.DownloadList Problem Types: CWE-497 Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in maennchen1.de m1.DownloadList. This issue affects m1.DownloadList: from n/a through 0.21. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/m1downloadlist/vulnerability/wordpress-m1-downloadlist-plugin-0-21-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-32165 State: PUBLISHED Published: 2025-04-04T15:58:45.526Z Last Updated: 2025-04-04T20:15:52.659Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: fromdoppler Products: Doppler Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fromdoppler Doppler Forms allows Stored XSS. This issue affects Doppler Forms: from n/a through 2.4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/doppler-form/vulnerability/wordpress-doppler-forms-plugin-2-4-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32166 State: PUBLISHED Published: 2025-04-04T15:58:46.522Z Last Updated: 2025-04-07T16:39:32.738Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: John Housholder Products: Emma for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in John Housholder Emma for WordPress allows Stored XSS. This issue affects Emma for WordPress: from n/a through 1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/emma-emarketing-plugin/vulnerability/wordpress-emma-for-wordpress-plugin-1-3-3-cross-site-
com/database/wordpress/plugin/emma-emarketing-plugin/vulnerability/wordpress-emma-for-wordpress-plugin-1-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32167 State: PUBLISHED Published: 2025-04-04T15:58:47.708Z Last Updated: 2025-04-04T20:15:44.965Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: devsoftbaltic Products: SurveyJS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devsoftbaltic SurveyJS allows Stored XSS. This issue affects SurveyJS: from n/a through 1.12.20. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/surveyjs/vulnerability/wordpress-surveyjs-plugin-1-12-20-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32168 State: PUBLISHED Published: 2025-04-04T15:58:48.813Z Last Updated: 2025-04-04T20:15:37.690Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: CodeYatri Products: Gutenify Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeYatri Gutenify allows Stored XSS. This issue affects Gutenify: from n/a through 1.4.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gutenify/vulnerability/wordpress-gutenify-plugin-1-4-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32169 State: PUBLISHED Published: 2025-04-04T15:58:49.896Z Last Updated: 2025-04-04T20:15:30.613Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Suresh Prasad Products: Showeblogin Social Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Suresh Prasad Showeblogin Social allows DOM-Based XSS. This issue affects Showeblogin Social: from n/a through 7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/showeblogin-facebook-page-like-box/vulnerability/wordpress-showeblogin-social-plugin-7-0-cros
/database/wordpress/plugin/showeblogin-facebook-page-like-box/vulnerability/wordpress-showeblogin-social-plugin-7-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32170 State: PUBLISHED Published: 2025-04-04T15:58:50.839Z Last Updated: 2025-04-04T20:15:23.557Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Stylemix Products: Motors Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stylemix Motors allows Stored XSS. This issue affects Motors: from n/a through 1.4.65. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/motors-car-dealership-classified-listings/vulnerability/wordpress-motors-plugin-1-4-65-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32171 State: PUBLISHED Published: 2025-04-04T15:58:51.690Z Last Updated: 2025-04-04T20:15:14.141Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Imtiaz Rayhan Products: Table Block by Tableberg Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imtiaz Rayhan Table Block by Tableberg allows Stored XSS. This issue affects Table Block by Tableberg: from n/a through 0.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/tableberg/vulnerability/wordpress-table-block-by-tableberg-best-wordpress-ta
://patchstack.com/database/wordpress/plugin/tableberg/vulnerability/wordpress-table-block-by-tableberg-best-wordpress-table-plugin-plugin-0-6-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32172 State: PUBLISHED Published: 2025-04-04T15:58:52.335Z Last Updated: 2025-04-04T20:15:05.489Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Yuri Baranov Products: YaMaps for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yuri Baranov YaMaps for WordPress allows Stored XSS. This issue affects YaMaps for WordPress: from n/a through 0.6.31. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/yamaps/vulnerability/wordpress-yamaps-for-wordpress-plugin-0-6-31-cross-site-scripting-xs
.com/database/wordpress/plugin/yamaps/vulnerability/wordpress-yamaps-for-wordpress-plugin-0-6-31-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32173 State: PUBLISHED Published: 2025-04-04T15:58:52.948Z Last Updated: 2025-04-04T20:14:55.664Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: bPlugins Products: B Blocks - The ultimate block collection Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks - The ultimate block collection allows Stored XSS. This issue affects B Blocks - The ultimate block collection: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/b-blocks/vulnerability/wordpress-b-blo
ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/b-blocks/vulnerability/wordpress-b-blocks-the-ultimate-block-collection-plugin-2-0-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve