Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-36852 State: PUBLISHED Published: 2022-08-22T14:45:47.953Z Last Updated: 2025-02-20T20:13:26.519Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: ThimPress Products: WP Hotel Booking Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Hotel Booking plugin <= 1.10.5 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-hotel-booking/wordpress-wp-hotel-booking-plugin-1-10-5-cross-site-request-forgery-csrf-vulnerability - https://wordpress.org/plugins/wp-hotel-booking/#developers
CVE ID: CVE-2021-36854 State: PUBLISHED Published: 2022-09-30T16:52:20.535Z Last Updated: 2025-02-20T20:00:08.090Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Booking Ultra Pro Products: Booking Ultra Pro (WordPress plugin) Problem Types: CWE-352 Description: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Booking Ultra Pro plugin <= 1.1.4 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/booking-ultra-pro/wordpress-booking-ultra-pro-plugin-1-1-4-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve - https://wordpress.org/plugin
ultra-pro-plugin-1-1-4-multiple-cross-site-request-forgery-csrf-vulnerabilities?_s_id=cve - https://wordpress.org/plugins/booking-ultra-pro/
CVE ID: CVE-2021-36855 State: PUBLISHED Published: 2022-09-30T16:53:48.407Z Last Updated: 2025-02-20T19:59:57.360Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Booking Ultra Pro Products: Booking Ultra Pro (WordPress plugin) Problem Types: CWE-352, CWE-79 Description: Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro plugin <= 1.1.4 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/booking-ultra-pro/ - https://patchstack.com/database/vulnerability/booking-ultra-pro/wordpress-booking-ultra-pro-plugin-1-1-4-cross-site-scripti
ps://patchstack.com/database/vulnerability/booking-ultra-pro/wordpress-booking-ultra-pro-plugin-1-1-4-cross-site-scripting-xss-via-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2021-36857 State: PUBLISHED Published: 2022-08-22T14:46:12.972Z Last Updated: 2025-02-20T20:13:19.171Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: wpshopmart Products: Testimonial (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in wpshopmart Testimonial Builder plugin <= 1.6.1 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/testimonial-builder/wordpress-testimonial-builder-plugin-1-6-1-authenticated-stored-cross-site-scripting-xss-vulnerability - https://wordpress.o
press-testimonial-builder-plugin-1-6-1-authenticated-stored-cross-site-scripting-xss-vulnerability - https://wordpress.org/plugins/testimonial-builder/#developers
CVE ID: CVE-2021-36858 State: PUBLISHED Published: 2022-10-28T15:09:34.047Z Last Updated: 2025-02-20T19:57:57.842Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Themepoints Products: Testimonials (WordPress plugin) Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themepoints Testimonials plugin <= 2.6 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/super-testimonial/wordpress-testimonials-plugin-2-6-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve - https://wordpress.org/plugins/super-testimon
s-plugin-2-6-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve - https://wordpress.org/plugins/super-testimonial/
CVE ID: CVE-2021-36861 State: PUBLISHED Published: 2022-08-05T15:08:35.577Z Last Updated: 2025-02-20T20:13:49.046Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Starfish Reviews Products: Rich Reviews by Starfish (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Rich Reviews by Starfish plugin <= 1.9.14 at WordPress allows an attacker to delete reviews. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/rich-reviews/wordpress-rich-reviews-by-starfish-plugin-1-9-14-cross-site-request-forgery-csrf-vulnerability - https:
ity/rich-reviews/wordpress-rich-reviews-by-starfish-plugin-1-9-14-cross-site-request-forgery-csrf-vulnerability - https://wordpress.org/plugins/rich-reviews/#developers
CVE ID: CVE-2021-36863 State: PUBLISHED Published: 2022-10-28T15:11:16.307Z Last Updated: 2025-02-20T19:57:50.451Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: ExpressTech Products: Quiz And Survey Master (WordPress plugin) Problem Types: CWE-79 Description: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/quiz-master-next/#developers - https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-4-auth-st
s - https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-4-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2021-36864 State: PUBLISHED Published: 2022-10-28T17:05:30.147Z Last Updated: 2025-02-20T19:57:43.079Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N) Vendors: ExpressTech Products: Quiz And Survey Master (WordPress plugin) Problem Types: CWE-79 Description: Auth. (editor+) Reflected Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/quiz-master-next/#developers - https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-4-auth-reflect
ttps://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-4-auth-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2021-36865 State: PUBLISHED Published: 2022-09-30T18:52:41.662Z Last Updated: 2025-02-20T19:59:47.921Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L) Vendors: ExpressTech Products: Quiz And Survey Master (WordPress plugin) Problem Types: Insecure Direct Object References (IDOR) Description: Insecure direct object references (IDOR) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 at WordPress allows attackers to change the content of the quiz. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-4-
erences: - https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-4-insecure-direct-object-references-idor-vulnerability?_s_id=cve - https://wordpress.org/plugins/quiz-master-next/#developers
CVE ID: CVE-2021-36866 State: PUBLISHED Published: 2022-05-31T19:24:56.898Z Last Updated: 2025-02-20T20:20:27.821Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Fatcat Apps Products: Easy Pricing Tables (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Easy Pricing Tables plugin <= 3.1.2 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/easy-pricing-tables/#developers - https://patchstack.com/database/vulnerability/easy-pricing-tables/wordpress-easy-pricing-tables-plugin
les/#developers - https://patchstack.com/database/vulnerability/easy-pricing-tables/wordpress-easy-pricing-tables-plugin-3-1-2-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2021-36867 State: PUBLISHED Published: 2022-04-26T18:03:11.848Z Last Updated: 2025-02-20T20:25:22.416Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Alexander Ustimenko Products: Psychological tests & quizzes (WordPress plugin) Problem Types: CWE-79 Description: Stored Cross-Site Scripting (XSS) vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin <= 0.21.19 on WordPress possible for users with contributor or higher user rights. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wp-testing/ - https://patchstack.com/database/vulnerability/wp-testing/wordp
References: - https://wordpress.org/plugins/wp-testing/ - https://patchstack.com/database/vulnerability/wp-testing/wordpress-psychological-tests-quizzes-plugin-0-21-19-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2021-36869 State: PUBLISHED Published: 2021-10-21T20:18:28.116Z Last Updated: 2025-03-28T16:48:20.582Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Ivory Search Products: Ivory Search (WordPress plugin) Problem Types: CWE-79 Description: Reflected Cross-Site Scripting (XSS) vulnerability in WordPress Ivory Search plugin (versions <= 4.6.6). Vulnerable parameter: &post. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/add-search-to-menu/#developers - https://patchstack.com/database/vulnerability/add-search-to-menu/wordpress-ivory-search-plugin-4-6-6-reflected-cross-site-scri
//patchstack.com/database/vulnerability/add-search-to-menu/wordpress-ivory-search-plugin-4-6-6-reflected-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2021-36870 State: PUBLISHED Published: 2021-09-09T11:18:20.862719Z Last Updated: 2024-10-22T19:36:38.285Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: Code Cabin Inc Products: WP Google Maps (WordPress plugin) Problem Types: CWE-79 Description: Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps plugin (versions <= 8.1.12). Vulnerable parameters: &dataset_name, &wpgmza_gdpr_retention_purpose, &wpgmza_gdpr_company_name, &name #2, &name, &polyname #2, &polyname, &address. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wp-
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/wp-google-maps/#developers - https://patchstack.com/database/vulnerability/wp-google-maps/wordpress-wp-google-maps-plugin-8-1-12-multiple-authenticated-persistent-cross-site-scripting-xss-vulnerabilities
CVE ID: CVE-2021-36871 State: PUBLISHED Published: 2021-09-09T11:19:51.696Z Last Updated: 2025-03-28T16:56:07.811Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: Code Cabin Inc Products: WP Google Maps Pro Problem Types: CWE-79 Description: Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in WordPress WP Google Maps Pro premium plugin (versions <= 8.1.11). Vulnerable parameters: &wpgmaps_marker_category_name, Value > &attributes[], Name > &attributes[], &icons[], &names[], &description, &link, &title. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wpgmaps.com/documentation/pr
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wpgmaps.com/documentation/pro-changelog/ - https://patchstack.com/database/vulnerability/wp-google-maps-pro/wordpress-wp-google-maps-pro-premium-plugin-8-1-11-multiple-authenticated-persistent-cross-site-scripting-xss-vulnerabilities
CVE ID: CVE-2021-36872 State: PUBLISHED Published: 2021-09-23T15:00:55.804Z Last Updated: 2025-03-28T16:55:01.742Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: Hector Cabrera Products: WordPress Popular Posts Problem Types: CWE-79 Description: Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress Popular Posts plugin (versions <= 5.3.3). Vulnerable at &widget-wpp[2][post_type]. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cabrerahector/wordpress-popular-posts/blob/master/changelog.md - https://patchstack.com/database/vulnerability/wordpress-popular-posts/wordpress-pop
lar-posts/blob/master/changelog.md - https://patchstack.com/database/vulnerability/wordpress-popular-posts/wordpress-popular-posts-plugin-5-3-3-authenticated-persistent-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2021-36873 State: PUBLISHED Published: 2021-09-23T15:07:44.186Z Last Updated: 2025-03-28T16:53:53.956Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: Webence Products: iQ Block Country Problem Types: CWE-79 Description: Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress iQ Block Country plugin (versions <= 1.2.11). Vulnerable parameter: &blockcountry_blockmessage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/iq-block-country/#developers - https://patchstack.com/database/vulnerability/iq-block-country-/wordpress-iq-block-country-plugin-1-2-11-au
developers - https://patchstack.com/database/vulnerability/iq-block-country-/wordpress-iq-block-country-plugin-1-2-11-authenticated-persistent-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2021-36874 State: PUBLISHED Published: 2021-09-27T15:32:39.576Z Last Updated: 2025-03-28T16:51:29.649Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L) Vendors: StylemixThemes Products: uListing (WordPress plugin) Problem Types: Insecure Direct Object Reference (IDOR) Description: Authenticated Insecure Direct Object References (IDOR) vulnerability in WordPress uListing plugin (versions <= 2.0.5). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/ulisting/#developers - https://patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-authenticated-insecure-direct-objec
tps://patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-authenticated-insecure-direct-object-references-idor-vulnerability
CVE ID: CVE-2021-36875 State: PUBLISHED Published: 2021-09-27T15:32:52.629Z Last Updated: 2025-07-01T20:46:34.299Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Stylemix Products: Directory Listings WordPress plugin – uListing Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in Stylemix Directory Listings WordPress plugin – uListing allows Reflected XSS.This issue affects Directory Listings WordPress plugin – uListing: from n/a through 2.0.5. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-authenticated
ment: References: - https://patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-authenticated-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2021-36876 State: PUBLISHED Published: 2021-09-27T15:32:23.393Z Last Updated: 2025-03-28T16:52:51.035Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: StylemixThemes Products: uListing (WordPress plugin) Problem Types: CWE-352 Description: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in WordPress uListing plugin (versions <= 2.0.5) as it lacks CSRF checks on plugin administration pages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/ulisting/#developers - https://patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-multiple-cross-site-
developers - https://patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-multiple-cross-site-request-forgery-csrf-vulnerabilities
CVE ID: CVE-2021-36877 State: PUBLISHED Published: 2021-09-27T15:32:29.761Z Last Updated: 2025-03-28T16:51:49.756Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: StylemixThemes Products: uListing (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions <= 2.0.5) makes it possible for attackers to modify user roles. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/ulisting/#developers - https://patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-modify-user-roles-via-cross-site-
https://patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-modify-user-roles-via-cross-site-request-forgery-csrf-vulnerability
CVE ID: CVE-2021-36878 State: PUBLISHED Published: 2021-09-27T14:12:59.645Z Last Updated: 2025-03-28T16:53:24.538Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: StylemixThemes Products: uListing (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WordPress uListing plugin (versions <= 2.0.5) makes it possible for attackers to update settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/ulisting/#developers - https://patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-settings-update-via-cross-site-requ
tps://patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-settings-update-via-cross-site-request-forgery-csrf-vulnerability
CVE ID: CVE-2021-36879 State: PUBLISHED Published: 2021-09-27T15:32:14.511Z Last Updated: 2025-03-28T16:53:09.107Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: StylemixThemes Products: uListing (WordPress plugin) Problem Types: CWE-264 Description: Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin (versions <= 2.0.5). Possible if WordPress configuration allows user registration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/ulisting/#developers - https://patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-unauthenticated-pri
#developers - https://patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-5-unauthenticated-privilege-escalation-vulnerability
CVE ID: CVE-2021-36880 State: PUBLISHED Published: 2021-09-27T15:32:46.608Z Last Updated: 2025-03-28T16:50:55.350Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: StylemixThemes Products: uListing (WordPress plugin) Problem Types: CWE-89 Description: Unauthenticated SQL Injection (SQLi) vulnerability in WordPress uListing plugin (versions <= 2.0.3), vulnerable parameter: custom. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/ulisting/#developers - https://patchstack.com/database/vulnerability/ulisting/wordpress-ulisting-plugin-2-0-3-unauthenticated-sql-injection-sqli-vulnerability
CVE ID: CVE-2021-36884 State: PUBLISHED Published: 2021-11-19T18:19:34.107Z Last Updated: 2025-03-28T16:47:21.365Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Backupbliss Products: Backup Migration (WordPress plugin) Problem Types: CWE-79 Description: Authenticated Persistent Cross-Site Scripting (XSS) vulnerability discovered in WordPress Backup Migration plugin <= 1.1.5 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/backup-backup/#developers - https://patchstack.com/database/vulnerability/backup-backup/wordpress-backup-migration-plugin-1-1-5-authenticated-persistent-cros
atchstack.com/database/vulnerability/backup-backup/wordpress-backup-migration-plugin-1-1-5-authenticated-persistent-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2021-36885 State: PUBLISHED Published: 2021-12-22T18:06:38.778Z Last Updated: 2025-03-28T16:15:27.343Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: CipherCoin Products: Contact Form 7 Database Addon – CFDB7 (WordPress plugin) Problem Types: CWE-79 Description: Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.6.1). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/contact-form-cfdb7/#developers - https://patchstack.com/database/vulnerability/contact-form-cfdb7/wordpress-contac
ugins/contact-form-cfdb7/#developers - https://patchstack.com/database/vulnerability/contact-form-cfdb7/wordpress-contact-form-7-database-addon-cfdb7-plugin-1-2-6-1-unauthenticated-stored-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2021-36886 State: PUBLISHED Published: 2021-12-22T18:06:46.962Z Last Updated: 2025-03-28T16:15:07.612Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: CipherCoin Products: Contact Form 7 Database Addon – CFDB7 (WordPress plugin) Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.5.9). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/contact-form-cfdb7/#developers - https://patchstack.com/database/vulnerability/contact-form-cfdb7/wordpress-contact-form-7-databa
orm-cfdb7/#developers - https://patchstack.com/database/vulnerability/contact-form-cfdb7/wordpress-contact-form-7-database-addon-cfdb7-plugin-1-2-5-9-cross-site-request-forgery-csrf-vulnerability
CVE ID: CVE-2021-36887 State: PUBLISHED Published: 2021-12-20T20:08:23.332Z Last Updated: 2025-03-28T16:15:48.617Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L) Vendors: Tarteaucitron Products: tarteaucitron.js – Cookies legislation & GDPR (WordPress plugin) Problem Types: CWE-352, CWE-79 Description: Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) discovered in tarteaucitron.js – Cookies legislation & GDPR WordPress plugin (versions <= 1.5.4), vulnerable parameters "tarteaucitronEmail" and "tarteaucitronPass". Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugin
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/tarteaucitronjs/#developers - https://patchstack.com/database/vulnerability/tarteaucitronjs/wordpress-tarteaucitron-js-cookies-legislation-gdpr-plugin-1-5-4-cross-site-request-forgery-csrf-vulnerability-leading-to-cross-site-scripting-xss
CVE ID: CVE-2021-36888 State: PUBLISHED Published: 2021-12-15T18:06:58.217Z Last Updated: 2025-03-28T16:16:42.122Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Oxilab Products: Image Hover Effects Ultimate (WordPress plugin) Problem Types: CWE-284 Description: Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (versions <= 9.6.1) WordPress plugin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/image-hover-effects-ultimate/#developers - https://patchstack.com/database/vulnerability/image-hover-effects-