Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-60190 State: PUBLISHED Published: 2025-11-06T15:54:48.157Z Last Updated: 2025-11-13T10:33:43.916Z Vendors: Hinnerk Altenburg Products: Immocaster WordPress Plugin Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Hinnerk Altenburg Immocaster WordPress Plugin immocaster allows PHP Local File Inclusion.This issue affects Immocaster WordPress Plugin: from n/a through <= 1.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/immocaster/vulnerability/wordpress-immocaster-wordpress-plugin-plugin-1-3-6-local-
chstack.com/database/Wordpress/Plugin/immocaster/vulnerability/wordpress-immocaster-wordpress-plugin-plugin-1-3-6-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-60191 State: PUBLISHED Published: 2025-11-06T15:54:48.713Z Last Updated: 2025-11-13T10:33:44.648Z Vendors: Premmerce Products: Premmerce Wishlist for WooCommerce Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Wishlist for WooCommerce premmerce-woocommerce-wishlist allows PHP Local File Inclusion.This issue affects Premmerce Wishlist for WooCommerce: from n/a through <= 1.1.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-woocommerce-wishlist/vulnerability/wordpress-p
erences: - https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-woocommerce-wishlist/vulnerability/wordpress-premmerce-wishlist-for-woocommerce-plugin-1-1-10-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-60192 State: PUBLISHED Published: 2025-11-06T15:54:49.257Z Last Updated: 2025-11-13T10:33:44.723Z Vendors: Premmerce Products: Premmerce Wholesale Pricing for WooCommerce Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premmerce-woocommerce-wholesale-pricing allows PHP Local File Inclusion.This issue affects Premmerce Wholesale Pricing for WooCommerce: from n/a through <= 1.1.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-woocommerc
Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-woocommerce-wholesale-pricing/vulnerability/wordpress-premmerce-wholesale-pricing-for-woocommerce-plugin-1-1-10-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-60193 State: PUBLISHED Published: 2025-11-06T15:54:49.770Z Last Updated: 2025-11-13T10:33:44.062Z Vendors: Premmerce Products: Premmerce User Roles Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows PHP Local File Inclusion.This issue affects Premmerce User Roles: from n/a through <= 1.0.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-user-roles/vulnerability/wordpress-premmerce-user-roles-plugin-1-0-13-local-file-inclusion-vulnera
ress/Plugin/premmerce-user-roles/vulnerability/wordpress-premmerce-user-roles-plugin-1-0-13-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-60194 State: PUBLISHED Published: 2025-11-06T15:54:50.878Z Last Updated: 2025-11-13T10:33:44.741Z Vendors: Premmerce Products: Premmerce Product Search for WooCommerce Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows PHP Local File Inclusion.This issue affects Premmerce Product Search for WooCommerce: from n/a through <= 2.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-search/vulnerability/wordpress-premmerce-pr
References: - https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-search/vulnerability/wordpress-premmerce-product-search-for-woocommerce-plugin-2-2-4-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-60195 State: PUBLISHED Published: 2025-11-06T15:54:51.541Z Last Updated: 2025-11-13T10:33:44.801Z Vendors: Vito Peleg Products: Atarim Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Privilege Escalation.This issue affects Atarim: from n/a through <= 4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/atarim-visual-collaboration/vulnerability/wordpress-atarim-plugin-4-2-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-60196 State: PUBLISHED Published: 2025-11-06T15:54:52.172Z Last Updated: 2025-11-13T10:33:43.946Z Vendors: Clearblue Products: Clearblue® Ovulation Calculator Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Clearblue Clearblue® Ovulation Calculator clearblue-ovulation-calculator allows PHP Local File Inclusion.This issue affects Clearblue® Ovulation Calculator: from n/a through <= 1.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/clearblue-ovulation-calculator/vulnerability/wordpress-clearblue-o
https://vdp.patchstack.com/database/Wordpress/Plugin/clearblue-ovulation-calculator/vulnerability/wordpress-clearblue-ovulation-calculator-plugin-1-2-4-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-60197 State: PUBLISHED Published: 2025-11-06T15:54:54.553Z Last Updated: 2025-11-18T14:38:16.228Z Vendors: owenr88 Products: Simple Contact Forms Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through <= 1.6.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/simple-contact-forms/vulnerability/wordpress-simple-contact-forms-plugin-1-6-4-local-file-inclusion-vulnerability
Plugin/simple-contact-forms/vulnerability/wordpress-simple-contact-forms-plugin-1-6-4-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-60198 State: PUBLISHED Published: 2025-11-06T15:54:55.955Z Last Updated: 2025-11-13T15:23:29.680Z Vendors: dedalx Products: Saxon - Viral Content Blog & Magazine Marketing WordPress Theme Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in dedalx Saxon - Viral Content Blog & Magazine Marketing WordPress Theme saxon allows PHP Local File Inclusion.This issue affects Saxon - Viral Content Blog & Magazine Marketing WordPress Theme: from n/a through <= 1.9.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/sa
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/saxon/vulnerability/wordpress-saxon-viral-content-blog-magazine-marketing-wordpress-theme-theme-1-9-3-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-60199 State: PUBLISHED Published: 2025-11-06T15:54:56.700Z Last Updated: 2025-11-18T14:36:27.416Z Vendors: dedalx Products: InHype - Blog & Magazine WordPress Theme Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in dedalx InHype - Blog & Magazine WordPress Theme inhype allows PHP Local File Inclusion.This issue affects InHype - Blog & Magazine WordPress Theme: from n/a through <= 1.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/inhype/vulnerability/wordpress-inhype-blog-magazine-wordpress-theme-th
tps://vdp.patchstack.com/database/Wordpress/Theme/inhype/vulnerability/wordpress-inhype-blog-magazine-wordpress-theme-theme-1-5-2-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-60200 State: PUBLISHED Published: 2025-11-06T15:54:59.689Z Last Updated: 2025-11-18T14:36:03.251Z Vendors: ThimPress Products: LearnPress Export Import Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThimPress LearnPress Export Import learnpress-import-export allows PHP Local File Inclusion.This issue affects LearnPress Export Import: from n/a through <= 4.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/learnpress-import-export/vulnerability/wordpress-learnpress-export-import-plugin-4-0-9-local-
/database/Wordpress/Plugin/learnpress-import-export/vulnerability/wordpress-learnpress-export-import-plugin-4-0-9-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-60201 State: PUBLISHED Published: 2025-11-06T15:55:00.953Z Last Updated: 2025-11-18T14:35:36.887Z Vendors: aguilatechnologies Products: WP Customer Area Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in aguilatechnologies WP Customer Area customer-area allows PHP Local File Inclusion.This issue affects WP Customer Area: from n/a through <= 8.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/customer-area/vulnerability/wordpress-wp-customer-area-plugin-8-2-7-local-file-inclusion-vulnerability?_s_id=c
ss/Plugin/customer-area/vulnerability/wordpress-wp-customer-area-plugin-8-2-7-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-60202 State: PUBLISHED Published: 2025-11-06T15:55:03.303Z Last Updated: 2025-11-18T14:34:54.403Z Vendors: Kyle Phillips Products: Favorites Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Kyle Phillips Favorites favorites allows PHP Local File Inclusion.This issue affects Favorites: from n/a through <= 2.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/favorites/vulnerability/wordpress-favorites-plugin-2-3-6-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-60203 State: PUBLISHED Published: 2025-11-06T15:55:04.065Z Last Updated: 2025-11-18T14:33:49.141Z Vendors: Josh Kohlbach Products: Store Exporter Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through <= 2.7.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/woocommerce-exporter/vulnerability/wordpress-store-exporter-plugin-2-7-6-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-60204 State: PUBLISHED Published: 2025-11-06T15:55:05.172Z Last Updated: 2025-11-18T14:33:32.413Z Vendors: Josh Kohlbach Products: WooCommerce Store Toolkit Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Josh Kohlbach WooCommerce Store Toolkit woocommerce-store-toolkit allows PHP Local File Inclusion.This issue affects WooCommerce Store Toolkit: from n/a through <= 2.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/woocommerce-store-toolkit/vulnerability/wordpress-woocommerce-store-toolkit-plugi
tchstack.com/database/Wordpress/Plugin/woocommerce-store-toolkit/vulnerability/wordpress-woocommerce-store-toolkit-plugin-2-4-3-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-60206 State: PUBLISHED Published: 2025-10-22T14:32:42.404Z Last Updated: 2025-11-13T10:33:44.651Z Vendors: Bearsthemes Products: Alone Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Bearsthemes Alone alone allows Code Injection.This issue affects Alone: from n/a through <= 7.8.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/alone/vulnerability/wordpress-alone-theme-7-8-3-remote-code-execution-rce-vulnerability?_s_id=cve
CVE ID: CVE-2025-60207 State: PUBLISHED Published: 2025-11-06T15:55:06.274Z Last Updated: 2025-11-17T16:10:47.407Z Vendors: Addify Products: Custom User Registration Fields for WooCommerce Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Addify Custom User Registration Fields for WooCommerce user-registration-plugin-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Custom User Registration Fields for WooCommerce: from n/a through <= 2.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/user-registration-plugin-for-woocommerce/vulnerability/word
nces: - https://vdp.patchstack.com/database/Wordpress/Plugin/user-registration-plugin-for-woocommerce/vulnerability/wordpress-custom-user-registration-fields-for-woocommerce-plugin-2-1-2-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-60208 State: PUBLISHED Published: 2025-10-22T14:32:42.742Z Last Updated: 2025-11-13T10:33:44.669Z Vendors: Tusko Trush Products: Advanced Custom Fields : CPT Options Pages Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Tusko Trush Advanced Custom Fields : CPT Options Pages acf-cpt-options-pages allows Object Injection.This issue affects Advanced Custom Fields : CPT Options Pages: from n/a through <= 2.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/acf-cpt-options-pages/vulnerability/wordpress-advanced-custom-fields-cpt-options-pages-plugin-2-0-9-cross-site-requ
ugin/acf-cpt-options-pages/vulnerability/wordpress-advanced-custom-fields-cpt-options-pages-plugin-2-0-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-60209 State: PUBLISHED Published: 2025-10-22T14:32:42.951Z Last Updated: 2025-11-13T10:33:44.683Z Vendors: CRM Perks Products: Connector for Gravity Forms and Google Sheets Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Object Injection.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through <= 1.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-gravity-forms-spreadsheets/vulnerability/wordpress-connector-for-gravity-forms-and-google-sheets-pl
/Wordpress/Plugin/wp-gravity-forms-spreadsheets/vulnerability/wordpress-connector-for-gravity-forms-and-google-sheets-plugin-1-2-5-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-60210 State: PUBLISHED Published: 2025-10-22T14:32:43.171Z Last Updated: 2025-11-13T10:33:44.796Z Vendors: wpeverest Products: Everest Forms - Frontend Listing Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in wpeverest Everest Forms - Frontend Listing everest-forms-frontend-listing allows Object Injection.This issue affects Everest Forms - Frontend Listing: from n/a through <= 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/everest-forms-frontend-listing/vulnerability/wordpress-everest-forms-frontend-listing-plugin-1-0-5-php-object-injection-vulnerability?_s_id=
nd-listing/vulnerability/wordpress-everest-forms-frontend-listing-plugin-1-0-5-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-60211 State: PUBLISHED Published: 2025-10-22T14:32:43.390Z Last Updated: 2025-11-13T10:33:44.557Z Vendors: extendons Products: WooCommerce Registration Fields Plugin - Custom Signup Fields Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in extendons WooCommerce Registration Fields Plugin - Custom Signup Fields extendons-registration-fields allows Privilege Escalation.This issue affects WooCommerce Registration Fields Plugin - Custom Signup Fields: from n/a through <= 3.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/extendons-registration-fields/vulnerability/wordpress
References: - https://vdp.patchstack.com/database/Wordpress/Plugin/extendons-registration-fields/vulnerability/wordpress-woocommerce-registration-fields-plugin-custom-signup-fields-plugin-3-2-3-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-60212 State: PUBLISHED Published: 2025-10-22T14:32:43.582Z Last Updated: 2025-11-13T10:33:44.607Z Vendors: designthemes Products: VEDA Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in designthemes VEDA veda allows Object Injection.This issue affects VEDA: from n/a through <= 4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/veda/vulnerability/wordpress-veda-theme-4-2-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-60213 State: PUBLISHED Published: 2025-10-22T14:32:43.800Z Last Updated: 2025-11-13T10:33:44.702Z Vendors: Whitebox-Studio Products: Scape Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Whitebox-Studio Scape scape allows Object Injection.This issue affects Scape: from n/a through <= 1.5.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/scape/vulnerability/wordpress-scape-theme-1-5-13-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-60214 State: PUBLISHED Published: 2025-10-22T14:32:44.013Z Last Updated: 2025-11-13T10:33:44.703Z Vendors: BoldThemes Products: Goldenblatt Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in BoldThemes Goldenblatt goldenblatt allows Object Injection.This issue affects Goldenblatt: from n/a through <= 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/goldenblatt/vulnerability/wordpress-goldenblatt-theme-1-2-1-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-60215 State: PUBLISHED Published: 2025-10-22T14:32:44.186Z Last Updated: 2025-11-13T10:33:44.735Z Vendors: designthemes Products: Kriya Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in designthemes Kriya kriya allows Object Injection.This issue affects Kriya: from n/a through <= 3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/kriya/vulnerability/wordpress-kriya-theme-3-4-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-60216 State: PUBLISHED Published: 2025-10-22T14:32:44.405Z Last Updated: 2025-11-13T10:33:44.769Z Vendors: BoldThemes Products: Addison Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in BoldThemes Addison addison allows Object Injection.This issue affects Addison: from n/a through <= 1.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/addison/vulnerability/wordpress-addison-theme-1-4-2-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-60217 State: PUBLISHED Published: 2025-10-22T14:32:44.691Z Last Updated: 2025-11-13T10:33:44.705Z Vendors: ypromo Products: PT Luxa Addons Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ypromo PT Luxa Addons pt-luxa-addons allows Path Traversal.This issue affects PT Luxa Addons: from n/a through <= 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/pt-luxa-addons/vulnerability/wordpress-pt-luxa-addons-plugin-1-2-2-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-60219 State: PUBLISHED Published: 2025-09-26T08:32:14.458Z Last Updated: 2025-09-26T15:37:08.198Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: HaruTheme Products: WooCommerce Designer Pro Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in HaruTheme WooCommerce Designer Pro allows Upload a Web Shell to a Web Server. This issue affects WooCommerce Designer Pro: from n/a through 1.9.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wc-designer-pro/vulnerability/wordpress-woocommerce-designer-pro-plugin-1-9-24-arbitrary-file-
database/wordpress/plugin/wc-designer-pro/vulnerability/wordpress-woocommerce-designer-pro-plugin-1-9-24-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-60220 State: PUBLISHED Published: 2025-10-22T14:32:44.897Z Last Updated: 2025-11-13T10:33:44.797Z Vendors: pebas Products: CouponXxL Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL: from n/a through <= 3.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/couponxxl/vulnerability/wordpress-couponxxl-theme-3-0-0-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-60221 State: PUBLISHED Published: 2025-10-22T14:32:45.187Z Last Updated: 2025-11-13T10:33:44.807Z Vendors: captivateaudio Products: Captivate Sync Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Object Injection.This issue affects Captivate Sync: from n/a through <= 3.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/captivatesync-trade/vulnerability/wordpress-captivate-sync-plugin-3-0-3-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-60222 State: PUBLISHED Published: 2025-10-22T14:32:45.465Z Last Updated: 2025-11-13T10:33:44.778Z Vendors: FantasticPlugins Products: SUMO Memberships for WooCommerce Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Privilege Escalation.This issue affects SUMO Memberships for WooCommerce: from n/a through <= 7.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/sumomemberships/vulnerability/wordpress-sumo-memberships-for-woocommerce-plugin-7-6-0-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-60224 State: PUBLISHED Published: 2025-10-22T14:32:45.675Z Last Updated: 2025-11-13T10:33:44.800Z Vendors: wpshuffle Products: Subscribe to Download Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through <= 2.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/subscribe-to-download/vulnerability/wordpress-subscribe-to-download-plugin-2-0-9-php-object-injection-vulnerability?_s_id=cve