Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
m, an attacker can bypass the allowlist check, causing the proxy to forward requests to arbitrary external or internal systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.bitdefender.com/support/security-advisories/server-side-request-forgery-in-gravityzone-update-server-using-null-bytes-va-12646
CVE ID: CVE-2025-2246 State: PUBLISHED Published: 2025-08-27T19:34:00.919Z Last Updated: 2025-08-27T19:49:56.554Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-862 Description: An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have allowed unauthenticated users to access sensitive manual CI/CD variables by querying the GraphQL API. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/524592 - https://hackerone.com/reports/3026559
CVE ID: CVE-2025-2247 State: PUBLISHED Published: 2025-05-15T20:07:27.502Z Last Updated: 2025-05-16T20:23:31.203Z Vendors: Unknown Products: WP-PManager Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WP-PManager WordPress plugin through 1.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/3974c5c3-887e-46bd-aad7-4f3169bff6de/
CVE ID: CVE-2025-2248 State: PUBLISHED Published: 2025-05-15T20:07:27.813Z Last Updated: 2025-05-16T20:22:26.373Z Vendors: Unknown Products: WP-PManager Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The WP-PManager WordPress plugin through 1.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b470a277-f5ad-49ff-97dd-4d3ee0269e5a/
CVE ID: CVE-2025-2249 State: PUBLISHED Published: 2025-03-29T07:03:32.151Z Last Updated: 2025-03-31T14:30:47.916Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: sojweb Products: SoJ SoundSlides Problem Types: CWE-434 Description: The SoJ SoundSlides plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the soj_soundslides_options_subpanel() function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: -
rbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f648e7f3-d93a-4a46-ae77-81a94880869c?source=cve - https://plugins.trac.wordpress.org/browser/soj-soundslides/tags/1.2.2/soj-soundslides.php
CVE ID: CVE-2025-2250 State: PUBLISHED Published: 2025-03-13T03:21:02.261Z Last Updated: 2025-03-14T13:48:09.012Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: sminozzi Products: WordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins Problem Types: CWE-89 Description: The WordPress Report Brute Force Attacks and Login Protection ReportAttacks Plugins plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated
pplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/602bf9b1-17a9-441a-b12d-15412df2deb4?source=cve - https://plugins.svn.wordpress.org/reportattacks/tags/2.32/includes/list-tables/class-reportattacks-list-table.php - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3254851%40reportattacks&
st-table.php - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3254851%40reportattacks&new=3254851%40reportattacks&sfp_email=&sfph_mail=
CVE ID: CVE-2025-2251 State: PUBLISHED Published: 2025-04-07T14:06:46.985Z Last Updated: 2025-11-11T17:10:22.089Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H) Vendors: Red Hat Products: Red Hat JBoss Enterprise Application Platform 7.4.23, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9, Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7, Red Hat JBoss Enterprise Application Platform 8.0.8, Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8, Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9, Red Hat JBoss Enterprise Application Platform Expansion Pack Problem T
s Enterprise Application Platform 8.0 for RHEL 9, Red Hat JBoss Enterprise Application Platform Expansion Pack Problem Types: CWE-502 Description: A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted serialized object, leading to remote code execution without requiring authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:10452 - https://access.redhat.com/errata/RHSA-2025:10453 - htt
References: - https://access.redhat.com/errata/RHSA-2025:10452 - https://access.redhat.com/errata/RHSA-2025:10453 - https://access.redhat.com/errata/RHSA-2025:10459 - https://access.redhat.com/errata/RHSA-2025:10924 - https://access.redhat.com/errata/RHSA-2025:10925 - https://access.redhat.com/errata/RHSA-2025:10926 - https://access.redhat.com/errata/RHSA-2025:10931 - https://access.redhat.com/security/cve/CVE-2025-2251 - https://bugzilla.redhat.com/show_bug.cgi?id=2351678
CVE ID: CVE-2025-2252 State: PUBLISHED Published: 2025-03-25T07:04:54.606Z Last Updated: 2025-03-31T17:44:11.737Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: smub Products: Easy Digital Downloads – eCommerce Payments and Subscriptions made easy Problem Types: CWE-200 Description: The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.6.1 via the edd_ajax_get_download_title() function. This makes it possible for unauthenticated attackers to extract private post titles of downloads. The impact here is minimal. Additional Analy
for unauthenticated attackers to extract private post titles of downloads. The impact here is minimal. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9e0e3b81-55fe-46b2-bae1-d7321d74c485?source=cve - https://plugins.trac.wordpress.org/browser/easy-digital-downloads/tags/3.3.6.1/includes/ajax-functions.php#L466 - https://plugins.trac.wordpress.org/browser/easy-digital-downloads/tags/3.3.6.1/includes/ajax-functions.php#L459 - https://plugins.trac.wordpress.org/changeset/3257409/easy-digital-downloads/trunk/includes/ajax-functions.php?contextall=1 - https://plugins.trac.wordpress.org/changeset/3257409/easy-digital-down
/trunk/includes/ajax-functions.php?contextall=1 - https://plugins.trac.wordpress.org/changeset/3257409/easy-digital-downloads/trunk/includes/ajax-functions.php?old=3226442&old_path=easy-digital-downloads%2Ftrunk%2Fincludes%2Fajax-functions.php
CVE ID: CVE-2025-2253 State: PUBLISHED Published: 2025-05-09T06:42:35.358Z Last Updated: 2025-05-09T15:41:25.960Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: imithemes Products: IMITHEMES Listing Problem Types: CWE-620 Description: The IMITHEMES Listing plugin is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.3. This is due to the plugin not properly validating a verification code value prior to updating their password through the imic_reset_password_init() function. This makes it possible for unauthenticated attackers to change any user's passwords, including administrators if the users email is known.
ble for unauthenticated attackers to change any user's passwords, including administrators if the users email is known. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4ed0ea4a-9cbf-4033-a31f-6cb954e8ce01?source=cve - https://themeforest.net/item/auto-stars-car-dealership-listings-wp-theme/11560490
CVE ID: CVE-2025-2254 State: PUBLISHED Published: 2025-06-12T10:02:40.003Z Last Updated: 2025-06-12T13:42:30.110Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-79 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 17.9 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. Improper output encoding in the snipper viewer functionality lead to Cross-Site scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/524636 - https://hackerone.com/reports/2973939
CVE ID: CVE-2025-2255 State: PUBLISHED Published: 2025-03-27T12:30:47.592Z Last Updated: 2025-03-27T13:13:21.218Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-79 Description: An issue has been discovered in Gitlab EE/CE for AppSec affecting all versions from 13.5.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. Certain error messages could allow Cross-Site Scripting attacks (XSS). for AppSec. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/524635 - https://hackerone.com/reports/2994150
CVE ID: CVE-2025-2256 State: PUBLISHED Published: 2025-09-12T06:06:04.796Z Last Updated: 2025-09-12T17:19:32.801Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-1284 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 7.12 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed unauthorized users to render the GitLab instance unresponsive to legitimate users by sending multiple concurrent large SAML responses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/09/10/patch-release-gitlab-18-3-2-released/ -
SA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/09/10/patch-release-gitlab-18-3-2-released/ - https://gitlab.com/gitlab-org/gitlab/-/issues/524633 - https://hackerone.com/reports/3019485
CVE ID: CVE-2025-2257 State: PUBLISHED Published: 2025-03-26T08:21:49.944Z Last Updated: 2025-03-26T14:22:06.539Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: boldgrid Products: Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid Problem Types: CWE-78 Description: The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.16.10 via the compression_level setting. This is due to the plugin using the compression_level setting in proc_open() without any validation. This makes it possible for authenticated attackers, with a
pression_level setting in proc_open() without any validation. This makes it possible for authenticated attackers, with administrator-level access and above, to execute code on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1ec3cc3e-c11b-43b6-9dd0-caa5ccfb90c8?source=cve - https://plugins.svn.wordpress.org/boldgrid-backup/tags/1.16.7/admin/compressor/class-boldgrid-backup-admin-compressor-system-zip.php - https://github.com/BoldGrid/boldgrid-backup/pull/622/files - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3257988%40boldgrid-backup&new=3257988%40boldgrid-backup&sfp_em
rdpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3257988%40boldgrid-backup&new=3257988%40boldgrid-backup&sfp_email=&sfph_mail=#file9
CVE ID: CVE-2025-2258 State: PUBLISHED Published: 2025-04-06T18:50:42.764Z Last Updated: 2025-04-15T16:03:10.402Z Vendors: Eclipse Foundation Products: ThreadX Problem Types: CWE-191 Description: In NetX Duo component HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Length smaller than the data request size. A possible workaround is to disable HTTP PUT support. This issue follows an uncomplete fix in CVE-2025-0728. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github
CVE-2025-0728. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/eclipse-threadx/netxduo/commit/6c8e9d1c95d71bd4b313e1cc37d8f8841543b248 - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-chqp-8vf8-cj25
CVE ID: CVE-2025-2259 State: PUBLISHED Published: 2025-04-06T19:01:20.233Z Last Updated: 2025-04-14T15:03:15.118Z Vendors: Eclipse Foundation Products: ThreadX Problem Types: CWE-191 Description: In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Length in one packet smaller than the data request size of the other packet. A possible workaround is to disable HTTP PUT support. This issue follows an incomplete fix of CVE-2025-0727 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Reference
an incomplete fix of CVE-2025-0727 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/eclipse-threadx/netxduo/commit/fb3195bbb6d0d6fe71a7a19585c008623c217f9e - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-chhp-gmxc-46rq
CVE ID: CVE-2025-2260 State: PUBLISHED Published: 2025-04-06T18:56:34.730Z Last Updated: 2025-04-14T15:03:16.223Z Vendors: Eclipse Foundation Products: ThreadX Problem Types: CWE-459 Description: In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause a denial of service by specially crafted packets. The core issue is missing closing of a file in case of an error condition, resulting in the 404 error for each further file request. Users can work-around the issue by disabling the PUT request support. This issue follows an incomplete fix of CVE-2025-0726. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
omplete fix of CVE-2025-0726. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/eclipse-threadx/netxduo/commit/fb3195bbb6d0d6fe71a7a19585c008623c217f9e - https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-f42f-6fvv-xqx3
CVE ID: CVE-2025-2261 State: PUBLISHED Published: 2025-05-21T18:29:53.820Z Last Updated: 2025-05-21T19:47:10.121Z Vendors: TIBCO Software Inc Products: TIBCO BPM Enterprise Problem Types: CWE-79 Description: Stored XSS in TIBCO ActiveMatrix Administrator allows malicious data to appear to be part of the website and run within user's browser under the privileges of the web application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.tibco.com/advisories/tibco-security-advisory-may-13-2025-tibco-bpm-enterprise-cve-2025-2261-r220/
CVE ID: CVE-2025-2262 State: PUBLISHED Published: 2025-03-18T06:36:25.233Z Last Updated: 2025-03-18T14:00:21.057Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: samdani Products: Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation Problem Types: CWE-862 Description: The The Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.7.3. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for
ers to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3c7cc2d2-8de4-453b-b4dc-48f75b151078?source=cve - https://plugins.trac.wordpress.org/browser/gs-logo-slider/trunk/includes/shortcode-builder/builder.php#L31 - https://plugins.trac.wordpress.org/browser/gs-logo-slider/trunk/includes/shortcode-builder/builder.php#L51 - https://plugins.trac.wordpress.org/browser/gs-logo-slider/trunk/includes/shortcode-builder/builder.php#L65 - https://plugins.trac
lugins.trac.wordpress.org/browser/gs-logo-slider/trunk/includes/shortcode-builder/builder.php#L65 - https://plugins.trac.wordpress.org/changeset/3256441/
CVE ID: CVE-2025-2263 State: PUBLISHED Published: 2025-03-13T16:25:59.356Z Last Updated: 2025-03-14T13:41:49.600Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Santesoft Products: Sante PACS Server Problem Types: CWE-121 Description: During login to the web server in "Sante PACS Server.exe", OpenSSL function EVP_DecryptUpdate is called to decrypt the username and password. A fixed 0x80-byte stack-based buffer is passed to the function as the output buffer. A stack-based buffer overflow exists if a long encrypted username or password is supplied by an unauthenticated remote attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
supplied by an unauthenticated remote attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2025-08
CVE ID: CVE-2025-2264 State: PUBLISHED Published: 2025-03-13T16:29:07.468Z Last Updated: 2025-03-14T13:41:13.356Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Santesoft Products: Sante PACS Server Problem Types: CWE-22 Description: A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2025-08
CVE ID: CVE-2025-2265 State: PUBLISHED Published: 2025-03-13T16:33:28.145Z Last Updated: 2025-03-17T13:57:50.486Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Santesoft Products: Sante PACS Server Problem Types: CWE-916 Description: The password of a web user in "Sante PACS Server.exe" is zero-padded to 0x2000 bytes, SHA1-hashed, base64-encoded, and stored in the USER table in the SQLite database HTTP.db. However, the number of hash bytes encoded and stored is truncated if the hash contains a zero byte Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tenable.com/security/research/tra-2025-08
CVE ID: CVE-2025-2266 State: PUBLISHED Published: 2025-03-29T07:03:30.915Z Last Updated: 2025-03-31T13:17:44.474Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: mestresdowp Products: Checkout Mestres do WP for WooCommerce Problem Types: CWE-862 Description: The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions() function in versions 8.6.5 to 8.7.5. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role f
nticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9834fd5b-8445-4c6f-95f9-f0df785c65f8?source=cve - https://wordpress.org/plugins/checkout-mestres-wp/ - https://plugins.trac.wordpress.org/browser/checkout-mestres-wp/trunk/backend/core/base/ajax.php#L31
CVE ID: CVE-2025-2267 State: PUBLISHED Published: 2025-03-15T03:23:23.948Z Last Updated: 2025-03-17T21:28:19.015Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: wp01ru Products: WP01 – Speed, Security, SEO consultant Problem Types: CWE-862 Description: The WP01 plugin for WordPress is vulnerable to Arbitrary File Download in all versions up to, and including, 2.6.2 due to a missing capability check and insufficient restrictions on the make_archive() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to download and read the contents of arbitrary files on the server, which can contain sensitive information.
and above, to download and read the contents of arbitrary files on the server, which can contain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/900d09e8-ded5-49b9-81bf-ddfc85d3cf2b?source=cve - https://plugins.trac.wordpress.org/browser/wp01/trunk/inc/class-wp01.php#L109 - https://wordpress.org/plugins/wp01/
CVE ID: CVE-2025-2268 State: PUBLISHED Published: 2025-03-14T13:33:33.887Z Last Updated: 2025-03-14T14:37:32.621Z Vendors: HP Inc. Products: HP LaserJet MFP M232-M237 Printer Series Problem Types: CWE-241 Description: The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Printing Protocol (IPP). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12114154-12114176-16/hpsbpi04013
CVE ID: CVE-2025-2269 State: PUBLISHED Published: 2025-04-11T23:21:55.426Z Last Updated: 2025-04-14T17:05:41.706Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: 10web Products: Photo Gallery by 10Web – Mobile-Friendly Image Gallery Problem Types: CWE-79 Description: The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘image_id’ parameter in all versions up to, and including, 1.8.34 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully tric
ssible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an administrative user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ce261415-870c-4300-85e8-b15a02c7eec5?source=cve - https://plugins.trac.wordpress.org/browser/photo-gallery/tags/1.8.34/admin/views/Editimage.php#L39