Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-6737 State: PUBLISHED Published: 2025-08-25T16:17:42.677Z Last Updated: 2025-08-25T20:33:31.760Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: Securden Products: Unified PAM Problem Types: CWE-1391 Description: Securden’s Unified PAM Remote Vendor Gateway access portal shares infrastructure and access tokens across multiple tenants. A malicious actor can obtain authentication material and access the gateway server with low-privilege permissions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rapid7.com/blog/post/securden-unified-pam-multiple-critical-vulnerabilities-fixed/
CVE ID: CVE-2025-6738 State: PUBLISHED Published: 2025-06-27T00:00:17.281Z Last Updated: 2025-06-27T13:47:31.583Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: huija Products: bicycleSharingServer Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in huija bicycleSharingServer up to 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a. Affected by this issue is the function userDao.selectUserByUserNameLike of the file UserServiceImpl.java. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product
jection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314012 - https://vuldb.com/?ctiid.314012 - https://vuldb.com/?submit.597988 - https://github.com/huija/bicycleSharingServer/issues/5
CVE ID: CVE-2025-6739 State: PUBLISHED Published: 2025-07-04T01:44:00.965Z Last Updated: 2025-07-08T14:29:19.999Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: bauc Products: WPQuiz Problem Types: CWE-89 Description: The WPQuiz plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'wpquiz' shortcode in all versions up to, and including, 0.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be u
s, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/16444905-b111-4b4f-a9f0-d8728da2ebfb?source=cve - https://wordpress.org/plugins/wpquiz/
CVE ID: CVE-2025-6740 State: PUBLISHED Published: 2025-07-04T11:18:24.720Z Last Updated: 2025-07-07T14:57:35.433Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: arshidkv12 Products: Contact Form 7 Database Addon – CFDB7 Problem Types: CWE-79 Description: The Contact Form 7 Database Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tmpD’ parameter in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes:
t arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/014803c8-3319-48ad-98c7-d1f372d37ff2?source=cve - https://wordpress.org/plugins/contact-form-cfdb7/#developers - https://plugins.trac.wordpress.org/browser/contact-form-cfdb7/tags/1.3.1/contact-form-cfdb-7.php - https://plugins.trac.wordpress.org/changeset/3320134/
CVE ID: CVE-2025-6741 State: PUBLISHED Published: 2025-07-22T17:00:15.146Z Last Updated: 2025-07-22T18:38:07.567Z Vendors: Devolutions Products: Server Problem Types: CWE-284 Description: Improper access control in secure message component in Devolutions Server allows an authenticated user to steal unauthorized entries via the secure message entry attachment feature This issue affects the following versions : * Devolutions Server 2025.2.2.0 through 2025.2.4.0 * Devolutions Server 2025.1.11.0 and earlier Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2025-0012/
CVE ID: CVE-2025-6742 State: PUBLISHED Published: 2025-07-09T05:23:39.316Z Last Updated: 2025-07-09T14:14:31.730Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: brainstormforce Products: SureForms – Drag and Drop Form Builder for WordPress Problem Types: CWE-502 Description: The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.7.3 via the use of file_exists() in the delete_entry_files() function without restriction on the path provided. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerabl
s makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1de12d1c-5ac4-4f80-b33d-a689a6916ee0?source=cve - https://wordpress.org/plugi
dfence.com/threat-intel/vulnerabilities/id/1de12d1c-5ac4-4f80-b33d-a689a6916ee0?source=cve - https://wordpress.org/plugins/sureforms/ - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3319753%40sureforms&new=3319753%40sureforms&sfp_email=&sfph_mail=
CVE ID: CVE-2025-6743 State: PUBLISHED Published: 2025-07-08T06:41:58.059Z Last Updated: 2025-07-08T13:41:54.021Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: xTemos Products: Woodmart Problem Types: CWE-79 Description: The Woodmart theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'multiple_markers' attribute in all versions up to, and including, 8.2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injecte
r-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4b881509-572b-4e2d-9e75-defaa2cc32dc?source=cve - https://themeforest.net/item/woodmart-woocommerce-wordpress-theme/20264492
CVE ID: CVE-2025-6744 State: PUBLISHED Published: 2025-07-08T09:22:30.508Z Last Updated: 2025-07-08T14:28:09.350Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: xTemos Products: Woodmart Problem Types: CWE-94 Description: The The Woodmart theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.2.3. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode through the woodmart_get_products_shortcode() function. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. Additional Analyst Notes: - CISA ADP Vulnr
es it possible for unauthenticated attackers to execute arbitrary shortcodes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dd056d29-3bd9-49e4-bcc4-fa487de8a27e?source=cve - https://themeforest.net/item/woodmart-woocommerce-wordpress-theme/20264492
CVE ID: CVE-2025-6745 State: PUBLISHED Published: 2025-07-11T07:22:59.718Z Last Updated: 2025-07-11T16:53:34.662Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: xTemos Products: Woodmart Problem Types: CWE-200 Description: The WoodMart plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.2.5 via the woodmart_get_posts_by_query() function due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
private, or draft posts that they should not have access to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3408895e-3418-4f70-8b7c-76f6ba899d11?source=cve - https://themeforest.net/item/woodmart-woocommerce-wordpress-theme/20264492
CVE ID: CVE-2025-6746 State: PUBLISHED Published: 2025-07-08T06:41:58.743Z Last Updated: 2025-07-08T13:40:42.663Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: xTemos Products: Woodmart Problem Types: CWE-98 Description: The WoodMart plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.2.3 via the 'layout' attribute. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution i
PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php files can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/98c1363e-b25d-46fc-b6bf-0285a37f748c?source=cve - https://themeforest.net/item/woodmart-woocommerce-wordpress-theme/20264492
CVE ID: CVE-2025-6747 State: PUBLISHED Published: 2025-07-16T06:40:43.102Z Last Updated: 2025-07-16T14:40:29.392Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: themefusion Products: Avada (Fusion) Builder Problem Types: CWE-79 Description: The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fusion_map' shortcode in all versions up to, and including, 3.12.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenev
ed attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f0a21eaa-4e2a-4d07-8635-f0a8a5db660f?source=cve - https://avada.com/documentation/avada-changelog/
CVE ID: CVE-2025-6748 State: PUBLISHED Published: 2025-06-27T01:31:06.283Z Last Updated: 2025-06-27T13:44:33.773Z Severity: LOW (CVSS 2.1 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: Bharti Airtel Products: Thanks App Problem Types: CWE-313, CWE-312 Description: A vulnerability classified as problematic has been found in Bharti Airtel Thanks App 4.105.4 on Android. Affected is an unknown function of the file /Android/data/com.myairtelapp/files/. The manipulation leads to cleartext storage in a file or on disk. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The vendor was contacted early about t
he physical device. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314046 - https://vuldb.com/?ctiid.314046 - https://vuldb.com/?submit.598122 - https://github.com/honestcorrupt/-CVE-Proof-of-Concept-Airtel-Android-App-Insecure-Local-Storage-of-Sensitive-Data - https://drive.google.com/file/d/1atnjssBq4tHeofoIDbWRH32z9rvA9jez/view?usp=sharing
CVE ID: CVE-2025-6749 State: PUBLISHED Published: 2025-06-27T02:00:11.675Z Last Updated: 2025-06-27T11:20:29.850Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: huija Products: bicycleSharingServer Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in huija bicycleSharingServer up to 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a. Affected by this vulnerability is the function searchAdminMessageShow of the file AdminController.java. The manipulation of the argument Title leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioni
n be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314047 - https://vuldb.com/?ctiid.314047 - https://vuldb.com/?submit.598164 - https://github.com/huija/bicycleSharingServer/issues/6
CVE ID: CVE-2025-6750 State: PUBLISHED Published: 2025-06-27T02:31:07.257Z Last Updated: 2025-06-27T13:37:44.290Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R) Vendors: n/a Products: HDF5 Problem Types: CWE-122, CWE-119 Description: A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. Affected by this issue is the function H5O__mtime_new_encode of the file src/H5Omtime.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314048 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314048 - https://vuldb.com/?ctiid.314048 - https://vuldb.com/?submit.601017 - https://github.com/HDFGroup/hdf5/issues/5549 - https://github.com/user-attachments/files/20438441/hdf5_crash_1.txt
CVE ID: CVE-2025-6751 State: PUBLISHED Published: 2025-06-27T03:00:15.299Z Last Updated: 2025-06-27T13:18:43.363Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: E8450 Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in Linksys E8450 up to 1.2.00.360516. This affects the function set_device_language of the file portal.cgi of the component HTTP POST Request Handler. The manipulation of the argument dut_language leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disc
k remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314049 - https://vuldb.com/?ctiid.314049 - https://vuldb.com/?submit.598217 - https://github.com/CH13hh/tmp_store_cc/blob/main/E8450/1.md - https://github.com/CH13hh/tmp_store_cc/blob/main/E8450/1.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-6752 State: PUBLISHED Published: 2025-06-27T03:31:06.429Z Last Updated: 2025-06-27T14:20:16.274Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: WRT1900ACS, EA7200, EA7450, EA7500 Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in Linksys WRT1900ACS, EA7200, EA7450 and EA7500 up to 20250619 and classified as critical. This vulnerability affects the function SetDefaultConnectionService of the file /upnp/control/Layer3Forwarding of the component IGD. The manipulation of the argument NewDefaultConnectionService leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has be
wDefaultConnectionService leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314050 - https://vuldb.com/?ctiid.314050 - https://vuldb.com/?submit.600638 - https://github.com/feiwuxingxie/cve/blob/main/linksys/vul01/1.md - https://github.com/feiwuxingxie/cve/blob/main/linksys/vul01/1.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-6753 State: PUBLISHED Published: 2025-06-27T04:00:16.948Z Last Updated: 2025-06-27T14:17:48.955Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: huija Products: bicycleSharingServer Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in huija bicycleSharingServer 1.0 and classified as critical. This issue affects the function selectAdminByNameLike of the file AdminController.java. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314051 - https://vuldb.
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314051 - https://vuldb.com/?ctiid.314051 - https://vuldb.com/?submit.597982 - https://github.com/huija/bicycleSharingServer/issues/4
CVE ID: CVE-2025-6754 State: PUBLISHED Published: 2025-08-02T07:24:20.355Z Last Updated: 2025-08-04T14:12:45.211Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: seometricsplugin Products: SEO Metrics Problem Types: CWE-862 Description: The SEO Metrics plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks in both the seo_metrics_handle_connect_button_click() AJAX handler and the seo_metrics_handle_custom_endpoint() function in versions 1.0.5 through 1.0.15. Because the AJAX action only verifies a nonce, without checking the caller’s capabilities, a subscriber-level user can retrieve the token and then access the custom
, without checking the caller’s capabilities, a subscriber-level user can retrieve the token and then access the custom endpoint to obtain full administrator cookies. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/48658b33-ae53-4919-8180-1188f72553f7?source=cve - https://wordpress.org/plugins/seo-metrics-helper/#developers - https://plugins.trac.wordpress.org/browser/seo-metrics-helper/trunk/endpoint.php - https://plugins.trac.wordpress.org/browser/seo-metrics-helper/trunk/common-functions.php - https://plugins.trac.wordpress.org/browser/seo-metrics-helper/trunk/seo-metrics.php - https://plugins.trac.wordpress.org/br
ps://plugins.trac.wordpress.org/browser/seo-metrics-helper/trunk/seo-metrics.php - https://plugins.trac.wordpress.org/browser/seo-metrics-helper/trunk/welcome-page.php
CVE ID: CVE-2025-6755 State: PUBLISHED Published: 2025-06-28T05:29:51.899Z Last Updated: 2025-06-30T18:32:53.491Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: gameusers Products: Game Users Share Buttons Problem Types: CWE-22 Description: The Game Users Share Buttons plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ajaxDeleteTheme() function in all versions up to, and including, 1.3.0. This makes it possible for Subscriber-level attackers to add arbitrary file paths (such as ../../../../wp-config.php) to the themeNameId parameter of the AJAX request, which can lead to remote code execution. Additi
./../../wp-config.php) to the themeNameId parameter of the AJAX request, which can lead to remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f861ece5-21e4-4c7f-8701-bd9492b1b8bf?source=cve - https://wordpress.org/plugins/game-users-share-buttons/#developers - https://plugins.trac.wordpress.org/browser/game-users-share-buttons/tags/1.3.0/game-users-share-buttons.php#L638
CVE ID: CVE-2025-6756 State: PUBLISHED Published: 2025-07-01T09:25:04.956Z Last Updated: 2025-07-02T13:24:30.841Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: themefic Products: Ultra Addons for Contact Form 7 Problem Types: CWE-79 Description: The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's UACF7_CUSTOM_FIELDS shortcode in all versions up to, and including, 3.5.21 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages th
ssible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5b839658-c472-40f0-855f-7201baeb790f?source=cve - https://wordpress.org/plugins/ultimate-addons-for-contact-form-7/#developers - https://plugins.trac.wordpress.org/browser/ultimate-addons-for-contact-form-7/tags/3.5.21/addons/dynamic-text/inc/shortcode.php#L113 - https://plugins.trac.wordpress.org/changeset/3319449/
CVE ID: CVE-2025-6757 State: PUBLISHED Published: 2025-09-06T04:22:49.175Z Last Updated: 2025-09-08T15:01:33.222Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: themejunkie Products: Recent Posts Widget Extended Problem Types: CWE-79 Description: The Recent Posts Widget Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rpwe' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute w
ticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3b70f48f-76a6-459c-8108-3ca008471534?source=cve - https://plugins.trac.wordpress.org/browser/recent-posts-widget-extended/tags/2.0.2/includes/shortcode.php#L14 - https://plugins.trac.wordpress.org/browser/recent-posts-widget-extended/tags/2.0.2/includes/functions.php#L24 - https://wordpress.org/plugins/recent-posts-widget-extended/#developers