Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-22740 State: PUBLISHED Published: 2025-03-27T21:20:58.897Z Last Updated: 2025-03-28T16:11:37.274Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Automattic Products: Sensei LMS Problem Types: CWE-862 Description: Missing Authorization vulnerability in Automattic Sensei LMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sensei LMS: from n/a through 4.24.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sensei-lms/vulnerability/wordpress-sensei-lms-plugin-4-24-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-22742 State: PUBLISHED Published: 2025-01-15T15:23:33.719Z Last Updated: 2025-01-15T18:48:08.081Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: falldeaf Products: WP ViewSTL Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in falldeaf WP ViewSTL allows DOM-Based XSS.This issue affects WP ViewSTL: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-viewstl/vulnerability/wordpress-wp-viewstl-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22743 State: PUBLISHED Published: 2025-01-15T15:23:33.121Z Last Updated: 2025-01-15T18:52:54.919Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Mohsin Rasool Products: Twitter Bootstrap Collapse aka Accordian Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mohsin Rasool Twitter Bootstrap Collapse aka Accordian Shortcode allows DOM-Based XSS.This issue affects Twitter Bootstrap Collapse aka Accordian Shortcode: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugi
gh 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/twitter-bootstrap-collapse-aka-accordian-shortcode/vulnerability/wordpress-twitter-bootstrap-collapse-aka-accordian-shortcode-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22744 State: PUBLISHED Published: 2025-01-15T15:23:32.587Z Last Updated: 2025-01-15T18:53:13.403Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Rob von Bothmer / SeoDev Products: S-DEV SEO Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rob von Bothmer / SeoDev S-DEV SEO allows Stored XSS.This issue affects S-DEV SEO: from n/a through 1.88. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/s-dev-seo/vulnerability/wordpress-s-dev-seo-plugin-1-88-cross-site-scripting-xss-vulnerability?_s_id=
e/wordpress/plugin/s-dev-seo/vulnerability/wordpress-s-dev-seo-plugin-1-88-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22745 State: PUBLISHED Published: 2025-01-15T15:23:32.057Z Last Updated: 2025-01-15T18:53:32.055Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Björn Weinbrenner Products: Navigation Du Lapin Blanc Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Björn Weinbrenner Navigation Du Lapin Blanc allows DOM-Based XSS.This issue affects Navigation Du Lapin Blanc: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/navigation-du-lapin-blanc/vulnerability/wordpress-navigation-du
nces: - https://patchstack.com/database/wordpress/plugin/navigation-du-lapin-blanc/vulnerability/wordpress-navigation-du-lapin-blanc-plugin-1-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22746 State: PUBLISHED Published: 2025-01-15T15:23:31.493Z Last Updated: 2025-01-15T18:53:54.779Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: HireHive Products: HireHive Job Plugin Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HireHive HireHive Job Plugin allows Stored XSS.This issue affects HireHive Job Plugin: from n/a through 2.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/zartis-job-plugin/vulnerability/wordpress-hirehive-job-plugin-plugin-2-9-0-cross-site-scripting-xss-vu
/wordpress/plugin/zartis-job-plugin/vulnerability/wordpress-hirehive-job-plugin-plugin-2-9-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22747 State: PUBLISHED Published: 2025-01-15T15:23:30.803Z Last Updated: 2025-01-15T18:54:14.554Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Tor Morten Jensen Products: Foundation Columns Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tor Morten Jensen Foundation Columns allows Stored XSS.This issue affects Foundation Columns: from n/a through 0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/foundation-columns/vulnerability/wordpress-foundation-columns-plugin-0-8-stored-cross-sit
.com/database/wordpress/plugin/foundation-columns/vulnerability/wordpress-foundation-columns-plugin-0-8-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22748 State: PUBLISHED Published: 2025-01-15T15:23:30.287Z Last Updated: 2025-01-15T18:54:50.476Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: SetMore Appointments Products: SetMore Theme – Custom Post Types Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SetMore Appointments SetMore Theme – Custom Post Types allows Stored XSS.This issue affects SetMore Theme – Custom Post Types: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/service-provider-profile-cpt/vulnerabi
ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/service-provider-profile-cpt/vulnerability/wordpress-setmore-theme-custom-post-types-plugin-1-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22749 State: PUBLISHED Published: 2025-01-15T15:23:29.776Z Last Updated: 2025-01-15T18:55:40.146Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: AwoThemes Products: Social Media Engine Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AwoThemes Social Media Engine allows Stored XSS.This issue affects Social Media Engine: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/social-media-engine/vulnerability/wordpress-social-media-engine-plugin-1-0-2-stored-cross-site-scrip
se/wordpress/plugin/social-media-engine/vulnerability/wordpress-social-media-engine-plugin-1-0-2-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22750 State: PUBLISHED Published: 2025-01-15T15:23:29.227Z Last Updated: 2025-01-15T18:56:14.929Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Tarak Patel Products: Post Carousel & Slider Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tarak Patel Post Carousel & Slider allows Reflected XSS.This issue affects Post Carousel & Slider: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/post-types-carousel-slider/vulnerability/wordpress-post-carousel-slider-plugin-1-0-4-r
ack.com/database/wordpress/plugin/post-types-carousel-slider/vulnerability/wordpress-post-carousel-slider-plugin-1-0-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22751 State: PUBLISHED Published: 2025-01-15T15:23:28.687Z Last Updated: 2025-01-15T18:56:51.395Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Mighty Digital Products: Partners Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mighty Digital Partners allows Reflected XSS.This issue affects Partners: from n/a through 0.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/partners/vulnerability/wordpress-partners-plugin-0-2-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22752 State: PUBLISHED Published: 2025-01-15T15:23:28.156Z Last Updated: 2025-01-15T18:57:28.156Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: GSheetConnector Products: GSheetConnector for Forminator Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GSheetConnector GSheetConnector for Forminator Forms allows Reflected XSS.This issue affects GSheetConnector for Forminator Forms: from n/a through 1.0.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gsheetconnector-forminator/vulnerab
ISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gsheetconnector-forminator/vulnerability/wordpress-gsheetconnector-for-forminator-forms-plugin-1-0-11-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22753 State: PUBLISHED Published: 2025-01-15T15:23:27.619Z Last Updated: 2025-01-15T18:57:49.260Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: dueclic Products: turboSMTP Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dueclic turboSMTP allows Reflected XSS.This issue affects turboSMTP: from n/a through 4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/turbosmtp/vulnerability/wordpress-turbosmtp-plugin-4-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22754 State: PUBLISHED Published: 2025-01-15T15:23:27.117Z Last Updated: 2025-01-15T19:05:08.745Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Berkman Center for Internet & Society Products: Amber Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Berkman Center for Internet & Society Amber allows Reflected XSS.This issue affects Amber: from n/a through 1.4.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/amberlink/vulnerability/wordpress-amber-plugin-1-4-4-reflected-cross-site-scripting-x
tack.com/database/wordpress/plugin/amberlink/vulnerability/wordpress-amber-plugin-1-4-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22755 State: PUBLISHED Published: 2025-01-15T15:23:26.575Z Last Updated: 2025-01-15T19:05:35.532Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: James Bavington Products: WP Headmaster Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in James Bavington WP Headmaster allows Reflected XSS.This issue affects WP Headmaster: from n/a through 0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-headmaster/vulnerability/wordpress-wp-headmaster-plugin-0-3-reflected-cross-site-scripting-xss-vulnerabi
press/plugin/wp-headmaster/vulnerability/wordpress-wp-headmaster-plugin-0-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22756 State: REJECTED Published: N/A Last Updated: 2025-05-14T13:26:44.862Z Description: No description available.
CVE ID: CVE-2025-22757 State: PUBLISHED Published: 2025-01-31T08:23:55.436Z Last Updated: 2025-01-31T19:32:16.837Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: CodeBard Products: CodeBard Help Desk Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeBard CodeBard Help Desk allows Stored XSS. This issue affects CodeBard Help Desk: from n/a through 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/codebard-help-desk/vulnerability/wordpress-codebard-help-desk-plugin-1-1-2-cross-site-scripting-xss-vuln
ordpress/plugin/codebard-help-desk/vulnerability/wordpress-codebard-help-desk-plugin-1-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22758 State: PUBLISHED Published: 2025-01-15T15:23:26.005Z Last Updated: 2025-01-15T19:06:38.787Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: aiwp Products: Elementor AI Addons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aiwp Elementor AI Addons allows DOM-Based XSS.This issue affects Elementor AI Addons: from n/a through 2.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ai-addons-for-elementor/vulnerability/wordpress-elementor-ai-addons-plugin-2-2-1-cross-site-scripting-xss-v
press/plugin/ai-addons-for-elementor/vulnerability/wordpress-elementor-ai-addons-plugin-2-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22759 State: PUBLISHED Published: 2025-01-15T15:23:25.490Z Last Updated: 2025-01-15T19:07:06.985Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: BoldGrid Products: Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor allows Stored XSS.This issue affects Post and Page Builder by BoldGrid – Visual Drag and Drop Editor: from n/a through 1.27.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack
rop Editor: from n/a through 1.27.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/post-and-page-builder/vulnerability/wordpress-post-and-page-builder-by-boldgrid-visual-drag-and-drop-editor-plugin-1-27-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22760 State: PUBLISHED Published: 2025-01-15T15:23:24.937Z Last Updated: 2025-01-15T19:07:29.053Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: CodeBard Products: CodeBard Help Desk Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeBard CodeBard Help Desk allows Reflected XSS.This issue affects CodeBard Help Desk: from n/a through 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/codebard-help-desk/vulnerability/wordpress-codebard-help-desk-plugin-1-1-2-reflected-cross-site-scriptin
ordpress/plugin/codebard-help-desk/vulnerability/wordpress-codebard-help-desk-plugin-1-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22761 State: PUBLISHED Published: 2025-01-15T15:23:24.435Z Last Updated: 2025-01-15T19:08:00.186Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Olaf Lederer Products: Ajax Contact Form Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Olaf Lederer Ajax Contact Form allows Stored XSS.This issue affects Ajax Contact Form: from n/a through 1.2.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fws-ajax-contact-form/vulnerability/wordpress-ajax-contact-form-plugin-ajax-contact-form-1-2-5-1-s
base/wordpress/plugin/fws-ajax-contact-form/vulnerability/wordpress-ajax-contact-form-plugin-ajax-contact-form-1-2-5-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22762 State: PUBLISHED Published: 2025-01-15T15:23:23.912Z Last Updated: 2025-01-15T19:09:20.716Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Octrace Studio Products: WordPress HelpDesk & Support Ticket System Plugin – Octrace Support Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Octrace Studio WordPress HelpDesk & Support Ticket System Plugin – Octrace Support allows Stored XSS.This issue affects WordPress HelpDesk & Support Ticket System Plugin – Octrace Support: from n/a through 1.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
et System Plugin – Octrace Support: from n/a through 1.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/octrace-support/vulnerability/wordpress-octrace-support-pro-plugin-1-2-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22763 State: PUBLISHED Published: 2025-01-21T13:40:38.430Z Last Updated: 2025-01-21T14:28:52.241Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Brizy Pro Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Brizy Pro allows Reflected XSS. This issue affects Brizy Pro: from n/a through 2.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/brizy-pro/vulnerability/wordpress-brizy-pro-plugin-2-6-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22764 State: PUBLISHED Published: 2025-01-15T15:23:23.399Z Last Updated: 2025-01-15T19:09:52.182Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: wpwebs Team - VA Jariwala Products: WP Post Corrector Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpwebs Team - VA Jariwala WP Post Corrector allows Reflected XSS.This issue affects WP Post Corrector: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-post-corrector/vulnerability/wordpress-wp-post-corrector-plugin-1-0-2-
tps://patchstack.com/database/wordpress/plugin/wp-post-corrector/vulnerability/wordpress-wp-post-corrector-plugin-1-0-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22765 State: PUBLISHED Published: 2025-01-15T15:23:22.851Z Last Updated: 2025-01-15T19:10:25.561Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Uri Weil Products: WP Order By Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uri Weil WP Order By allows Reflected XSS.This issue affects WP Order By: from n/a through 1.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-order-by/vulnerability/wordpress-wp-order-by-plugin-1-4-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22766 State: PUBLISHED Published: 2025-01-15T15:23:22.037Z Last Updated: 2025-01-15T19:15:33.510Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Masoud Amini Products: Zarinpal Paid Download Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Masoud Amini Zarinpal Paid Download allows Reflected XSS.This issue affects Zarinpal Paid Download: from n/a through 2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/zarinpal-paid-downloads/vulnerability/wordpress-zarinpal-paid-download-plugin-2-3-refl
ack.com/database/wordpress/plugin/zarinpal-paid-downloads/vulnerability/wordpress-zarinpal-paid-download-plugin-2-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22767 State: PUBLISHED Published: 2025-03-28T15:12:26.436Z Last Updated: 2025-03-28T16:59:52.051Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: globalpayments Products: GlobalPayments WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in globalpayments GlobalPayments WooCommerce allows Reflected XSS. This issue affects GlobalPayments WooCommerce: from n/a through 1.13.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/global-payments-woocommerce/vulnerability/wordpress-globalpayments
s: - https://patchstack.com/database/wordpress/plugin/global-payments-woocommerce/vulnerability/wordpress-globalpayments-woocommerce-plugin-1-12-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22768 State: PUBLISHED Published: 2025-01-23T15:29:39.110Z Last Updated: 2025-02-12T20:41:26.273Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Qwerty23 Products: Rocket Media Library Mime Type Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Qwerty23 Rocket Media Library Mime Type allows Stored XSS. This issue affects Rocket Media Library Mime Type: from n/a through 2.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rocket-media-library-mime-type/vulnerability/wordpress-rocket-media-library-mime-type-plugin-2-1-0-csrf-to-stored-cross-
rocket-media-library-mime-type/vulnerability/wordpress-rocket-media-library-mime-type-plugin-2-1-0-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22769 State: PUBLISHED Published: 2025-01-15T15:23:21.196Z Last Updated: 2025-01-15T19:16:57.516Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Creative Brahma Products: Multifox Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Brahma Multifox allows Stored XSS.This issue affects Multifox: from n/a through 1.3.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/multifox/vulnerability/wordpress-multifox-theme-1-3-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22770 State: PUBLISHED Published: 2025-03-27T14:11:01.419Z Last Updated: 2025-03-27T15:44:37.014Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: EnvoThemes Products: Envo Multipurpose Problem Types: CWE-862 Description: Missing Authorization vulnerability in EnvoThemes Envo Multipurpose allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Envo Multipurpose: from n/a through 1.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/envo-multipurpose/vulnerability/wordpress-envo-multipurpose-theme-1-1-6-broken-access-control-vulnerability?_s_id
/theme/envo-multipurpose/vulnerability/wordpress-envo-multipurpose-theme-1-1-6-broken-access-control-vulnerability?_s_id=cve