Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-64228 State: PUBLISHED Published: 2025-10-29T08:38:11.052Z Last Updated: 2025-11-13T10:33:49.345Z Vendors: FantasticPlugins Products: SUMO Affiliates Pro Problem Types: CWE-497 Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Retrieve Embedded Sensitive Data.This issue affects SUMO Affiliates Pro: from n/a through <= 11.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/affs/vulnerability/wordpress-sumo-affiliates-pro-plugin-11-0-0-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-64229 State: PUBLISHED Published: 2025-10-29T08:38:11.498Z Last Updated: 2025-11-13T10:33:49.310Z Vendors: BoldGrid Products: Client Invoicing by Sprout Invoices Problem Types: CWE-862 Description: Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/sprout-invoices/vulnerability/wordpress-client-invoicing-by-sprout-invoices-plugin-20-8-7-broken-access-control
s/Plugin/sprout-invoices/vulnerability/wordpress-client-invoicing-by-sprout-invoices-plugin-20-8-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-64232 State: PUBLISHED Published: 2025-11-06T15:56:12.576Z Last Updated: 2025-11-13T10:33:49.256Z Vendors: icopydoc Products: Import from YML Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icopydoc Import from YML import-from-yml allows Reflected XSS.This issue affects Import from YML: from n/a through <= 3.1.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/import-from-yml/vulnerability/wordpress-import-from-yml-plugin-3-1-17-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-64234 State: PUBLISHED Published: 2025-10-29T08:38:11.964Z Last Updated: 2025-11-13T10:33:49.313Z Vendors: Evergreen Content Poster Products: Evergreen Content Poster Problem Types: CWE-862 Description: Missing Authorization vulnerability in Evergreen Content Poster Evergreen Content Poster evergreen-content-poster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Evergreen Content Poster: from n/a through <= 1.4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/evergreen-content-poster/vulnerability/wordpress-evergreen-content-poster-plugin-1-4-5-broken-access-con
ordpress/Plugin/evergreen-content-poster/vulnerability/wordpress-evergreen-content-poster-plugin-1-4-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-64259 State: PUBLISHED Published: 2025-11-13T09:24:26.955Z Last Updated: 2025-11-13T17:47:38.067Z Vendors: Jeroen Schmit Products: Theater for WordPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Theater for WordPress: from n/a through <= 0.18.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/theatre/vulnerability/wordpress-theater-for-wordpress-plugin-0-18-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-64261 State: PUBLISHED Published: 2025-11-13T09:24:27.476Z Last Updated: 2025-11-13T17:48:27.496Z Vendors: codepeople Products: Appointment Booking Calendar Problem Types: CWE-862 Description: Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appointment Booking Calendar: from n/a through <= 1.3.95. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/appointment-booking-calendar/vulnerability/wordpress-appointment-booking-calendar-plugin-1-3-95-broken-access-contr
ugin/appointment-booking-calendar/vulnerability/wordpress-appointment-booking-calendar-plugin-1-3-95-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-64262 State: PUBLISHED Published: 2025-11-13T09:24:27.918Z Last Updated: 2025-11-13T17:53:08.186Z Vendors: ramon fincken Products: Auto Prune Posts Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ramon fincken Auto Prune Posts auto-prune-posts allows Cross Site Request Forgery.This issue affects Auto Prune Posts: from n/a through <= 3.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/auto-prune-posts/vulnerability/wordpress-auto-prune-posts-plugin-3-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-64263 State: PUBLISHED Published: 2025-11-13T09:24:28.383Z Last Updated: 2025-11-13T17:52:10.073Z Vendors: PluginEver Products: WP Content Pilot Problem Types: CWE-862 Description: Missing Authorization vulnerability in PluginEver WP Content Pilot wp-content-pilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Content Pilot: from n/a through <= 2.1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-content-pilot/vulnerability/wordpress-wp-content-pilot-plugin-2-1-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-64264 State: PUBLISHED Published: 2025-11-13T09:24:28.871Z Last Updated: 2025-11-13T17:49:48.459Z Vendors: Aman Products: Popup addon for Ninja Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon for Ninja Forms popup-addon-for-ninja-forms allows Stored XSS.This issue affects Popup addon for Ninja Forms: from n/a through <= 3.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/popup-addon-for-ninja-forms/vulnerability/wordpress-popup-addon-for-ninja-forms-plugin-3-5-1-cross-site-scripting-xss-vulner
p-addon-for-ninja-forms/vulnerability/wordpress-popup-addon-for-ninja-forms-plugin-3-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-64265 State: PUBLISHED Published: 2025-11-13T09:24:29.310Z Last Updated: 2025-11-13T17:55:18.227Z Vendors: N-Media Products: Frontend File Manager Problem Types: CWE-862 Description: Missing Authorization vulnerability in N-Media Frontend File Manager nmedia-user-file-uploader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frontend File Manager: from n/a through <= 23.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/nmedia-user-file-uploader/vulnerability/wordpress-frontend-file-manager-plugin-23-2-broken-access-control-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-64267 State: PUBLISHED Published: 2025-11-13T09:24:29.783Z Last Updated: 2025-11-13T17:56:09.846Z Vendors: WPSwings Products: WooCommerce Ultimate Points And Rewards Problem Types: CWE-497 Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPSwings WooCommerce Ultimate Points And Rewards woocommerce-ultimate-points-and-rewards allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Ultimate Points And Rewards: from n/a through <= 2.10.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/woocommerce-ultimate-points-and-rewards/vulnerability/
eferences: - https://vdp.patchstack.com/database/Wordpress/Plugin/woocommerce-ultimate-points-and-rewards/vulnerability/wordpress-woocommerce-ultimate-points-and-rewards-plugin-2-10-2-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-64269 State: PUBLISHED Published: 2025-11-13T09:24:30.214Z Last Updated: 2025-11-13T17:57:28.957Z Vendors: EDGARROJAS Products: WooCommerce PDF Invoice Builder Problem Types: CWE-862 Description: Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoice Builder: from n/a through <= 1.2.150. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/woo-pdf-invoice-builder/vulnerability/wordpress-woocommerce-pdf-invoice-builder-plugin-1-2-150-broken-access-c
ss/Plugin/woo-pdf-invoice-builder/vulnerability/wordpress-woocommerce-pdf-invoice-builder-plugin-1-2-150-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-64271 State: PUBLISHED Published: 2025-11-13T09:24:30.639Z Last Updated: 2025-11-13T17:58:27.770Z Vendors: HasThemes Products: WP Plugin Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in HasThemes WP Plugin Manager wp-plugin-manager allows Cross Site Request Forgery.This issue affects WP Plugin Manager: from n/a through <= 1.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-plugin-manager/vulnerability/wordpress-wp-plugin-manager-plugin-1-4-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-64274 State: PUBLISHED Published: 2025-11-13T09:24:31.061Z Last Updated: 2025-11-13T17:59:08.575Z Vendors: wpkoithemes Products: WPKoi Templates for Elementor Problem Types: CWE-862 Description: Missing Authorization vulnerability in wpkoithemes WPKoi Templates for Elementor wpkoi-templates-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPKoi Templates for Elementor: from n/a through <= 3.4.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wpkoi-templates-for-elementor/vulnerability/wordpress-wpkoi-templates-for-elementor-plugin-3-4-4-broken-access
ss/Plugin/wpkoi-templates-for-elementor/vulnerability/wordpress-wpkoi-templates-for-elementor-plugin-3-4-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-64275 State: PUBLISHED Published: 2025-11-13T09:24:31.484Z Last Updated: 2025-11-13T16:27:45.869Z Vendors: wpdevelop Products: Booking Manager Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevelop Booking Manager booking-manager allows Stored XSS.This issue affects Booking Manager: from n/a through <= 2.1.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/booking-manager/vulnerability/wordpress-booking-manager-plugin-2-1-17-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-64276 State: PUBLISHED Published: 2025-11-13T09:24:31.911Z Last Updated: 2025-11-17T19:18:03.008Z Vendors: Ays Pro Products: Survey Maker Problem Types: CWE-862 Description: Missing Authorization vulnerability in Ays Pro Survey Maker survey-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Survey Maker: from n/a through <= 5.1.9.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/survey-maker/vulnerability/wordpress-survey-maker-plugin-5-1-9-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-64277 State: PUBLISHED Published: 2025-11-13T09:24:32.345Z Last Updated: 2025-11-13T16:11:00.877Z Vendors: QuantumCloud Products: ChatBot Problem Types: CWE-862 Description: Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through <= 7.3.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/chatbot/vulnerability/wordpress-chatbot-plugin-7-3-9-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-64280 State: PUBLISHED Published: 2025-11-12T00:00:00.000Z Last Updated: 2025-11-13T15:57:15.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permit_no field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://centralsquare.com - https://machevalia.blog/blog/multiple-vulnerabilities-in-centralsquare-etrakit-and-ivr
CVE ID: CVE-2025-64281 State: PUBLISHED Published: 2025-11-12T00:00:00.000Z Last Updated: 2025-11-13T16:00:19.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://centralsquare.com - https://machevalia.blog/blog/multiple-vulnerabilities-in-centralsquare-etrakit-and-ivr
CVE ID: CVE-2025-64283 State: PUBLISHED Published: 2025-10-29T08:38:12.413Z Last Updated: 2025-11-13T10:33:49.353Z Vendors: Rometheme Products: RTMKit Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Rometheme RTMKit rometheme-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RTMKit: from n/a through <= 1.6.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/rometheme-for-elementor/vulnerability/wordpress-rtmkit-plugin-1-6-7-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE ID: CVE-2025-64284 State: PUBLISHED Published: 2025-10-29T08:38:12.876Z Last Updated: 2025-11-13T10:33:49.310Z Vendors: Majestic Support Products: Majestic Support Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affects Majestic Support: from n/a through <= 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/majestic-support/vulnerability/wordpress-majestic-support-plugin-1-1-1-local-file-inclusion-vulnerability?_s_id
s/Plugin/majestic-support/vulnerability/wordpress-majestic-support-plugin-1-1-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-64285 State: PUBLISHED Published: 2025-10-29T08:38:13.449Z Last Updated: 2025-11-13T10:33:49.266Z Vendors: Premmerce Products: Premmerce Wholesale Pricing for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Premmerce Premmerce Wholesale Pricing for WooCommerce premmerce-woocommerce-wholesale-pricing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce Wholesale Pricing for WooCommerce: from n/a through <= 1.1.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-woocommerce-wholesale-pricing/vulnerability/wordpre
es: - https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-woocommerce-wholesale-pricing/vulnerability/wordpress-premmerce-wholesale-pricing-for-woocommerce-plugin-1-1-10-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-64286 State: PUBLISHED Published: 2025-10-29T08:38:13.920Z Last Updated: 2025-11-13T10:33:49.258Z Vendors: WpEstate Products: WP Rentals Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WpEstate WP Rentals wprentals allows Cross Site Request Forgery.This issue affects WP Rentals: from n/a through <= 3.13.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/wprentals/vulnerability/wordpress-wp-rentals-theme-3-13-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-64287 State: PUBLISHED Published: 2025-11-06T15:56:13.317Z Last Updated: 2025-11-13T10:33:49.264Z Vendors: Edge-Themes Products: Alloggio - Hotel Booking Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Alloggio - Hotel Booking alloggio allows PHP Local File Inclusion.This issue affects Alloggio - Hotel Booking: from n/a through <= 1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/alloggio/vulnerability/wordpress-alloggio-hotel-booking-theme-theme-1-8-local-file-inclusion-vulnerability?_
press/Theme/alloggio/vulnerability/wordpress-alloggio-hotel-booking-theme-theme-1-8-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-64288 State: PUBLISHED Published: 2025-10-29T08:38:14.400Z Last Updated: 2025-11-13T10:33:49.364Z Vendors: Premmerce Products: Premmerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce premmerce allows Cross Site Request Forgery.This issue affects Premmerce: from n/a through <= 1.3.19. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce/vulnerability/wordpress-premmerce-plugin-1-3-19-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-64289 State: PUBLISHED Published: 2025-10-29T08:38:14.838Z Last Updated: 2025-11-13T10:33:49.275Z Vendors: Premmerce Products: Premmerce Product Search for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows Stored XSS.This issue affects Premmerce Product Search for WooCommerce: from n/a through <= 2.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-search/vulnerability/wordpress-premmerce-product-search-for-woocommerce-plug
ack.com/database/Wordpress/Plugin/premmerce-search/vulnerability/wordpress-premmerce-product-search-for-woocommerce-plugin-2-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-64290 State: PUBLISHED Published: 2025-10-29T08:38:15.299Z Last Updated: 2025-11-13T10:33:49.409Z Vendors: Premmerce Products: Premmerce Product Search for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows Cross Site Request Forgery.This issue affects Premmerce Product Search for WooCommerce: from n/a through <= 2.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-search/vulnerability/wordpress-premmerce-product-search-for-woocommerce-plugin-2-2-4-cross-site-request-forger
premmerce-search/vulnerability/wordpress-premmerce-product-search-for-woocommerce-plugin-2-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-64291 State: PUBLISHED Published: 2025-10-29T08:38:15.757Z Last Updated: 2025-11-13T10:33:49.343Z Vendors: Premmerce Products: Premmerce User Roles Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Stored XSS.This issue affects Premmerce User Roles: from n/a through <= 1.0.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-user-roles/vulnerability/wordpress-premmerce-user-roles-plugin-1-0-13-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-64292 State: PUBLISHED Published: 2025-11-13T09:24:32.781Z Last Updated: 2025-11-21T18:29:17.533Z Vendors: PascalBajorat Products: Analytics Germanized for Google Analytics Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PascalBajorat Analytics Germanized for Google Analytics ga-germanized allows DOM-Based XSS.This issue affects Analytics Germanized for Google Analytics: from n/a through <= 1.6.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/ga-germanized/vulnerability/wordpress-analytics-germanized-for-google-analy
vdp.patchstack.com/database/Wordpress/Plugin/ga-germanized/vulnerability/wordpress-analytics-germanized-for-google-analytics-plugin-1-6-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-64293 State: PUBLISHED Published: 2025-11-12T15:52:49.026Z Last Updated: 2025-11-12T17:21:18.680Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: Golemiq Products: 0 Day Analytics Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Golemiq 0 Day Analytics allows SQL Injection.This issue affects 0 Day Analytics: from n/a through 4.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/wordpress/plugin/0-day-analytics/vulnerability/wordpress-0-day-analytics-plugin-4-0-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-64294 State: PUBLISHED Published: 2025-11-03T13:09:39.398Z Last Updated: 2025-11-13T10:33:49.360Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: d3wp Products: WP Snow Effect Problem Types: CWE-862 Description: Missing Authorization vulnerability in d3wp WP Snow Effect allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Snow Effect: from n/a through 1.1.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/wordpress/plugin/wp-snow-effect/vulnerability/wordpress-wp-snow-effect-plugin-1-1-15-broken-access-control-to-notice-dismissal-vulnerability?_s_id=cve
CVE ID: CVE-2025-64296 State: PUBLISHED Published: 2025-10-29T04:08:45.858Z Last Updated: 2025-10-29T13:43:42.103Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Facebook Products: Facebook for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Facebook Facebook for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Facebook for WooCommerce: from n/a through 3.5.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/wordpress/plugin/facebook-for-woocommerce/security-policy/vdp/vulnerability/wordpress-facebook-for-woocommer
om/database/wordpress/plugin/facebook-for-woocommerce/security-policy/vdp/vulnerability/wordpress-facebook-for-woocommerce-plugin-3-5-7-broken-access-control-to-notice-dismissal-vulnerability?_s_id=cve
CVE ID: CVE-2025-64299 State: PUBLISHED Published: 2025-11-21T06:18:02.599Z Last Updated: 2025-11-21T14:57:57.524Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: LogStare Inc. Products: LogStare Collector (for Windows), LogStare Collector (for Linux) Problem Types: CWE-201 Description: LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.logstare.com/vulnerability/2025-001/ - https://jvn.jp/en/jp/JVN77560819/