Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
's authentication token from the shared client machine and access their WorkSpace. To mitigate this issue, users should upgrade to the Amazon WorkSpaces client for Linux version 2025.0 or later. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://aws.amazon.com/security/security-bulletins/AWS-2025-025/ - https://docs.aws.amazon.com/workspaces/latest/userguide/amazon-workspaces-linux-client.html#linux-release-notes
CVE ID: CVE-2025-12784 State: PUBLISHED Published: 2025-11-13T17:35:09.424Z Last Updated: 2025-11-13T18:03:11.167Z Vendors: HP Inc Products: HP Color LaserJet MFP M478-M479 series, HP Color LaserJet Pro M453-M454 series, HP LaserJet Pro M304-M305 Printer series, HP LaserJet Pro M404-M405 Printer series, HP LaserJet Pro MFP M428-M429 f series, HP LaserJet Pro MFP M428-M429 series Problem Types: CWE-200 Description: Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/
odifying the LDAP Server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_13229161-13229183-16/hpsbpi04074
CVE ID: CVE-2025-12785 State: PUBLISHED Published: 2025-11-13T17:38:09.461Z Last Updated: 2025-11-13T18:03:55.247Z Vendors: HP Inc Products: HP Color LaserJet MFP M478-M479 series, HP Color LaserJet Pro M453-M454 series, HP LaserJet Pro M304-M305 Printer series, HP LaserJet Pro M404-M405 Printer series, HP LaserJet Pro MFP M428-M429 f series, HP LaserJet Pro MFP M428-M429 series Problem Types: CWE-200 Description: Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/
CVE ID: CVE-2025-12787 State: PUBLISHED Published: 2025-11-11T11:03:45.316Z Last Updated: 2025-11-14T15:29:36.323Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: themefic Products: Hydra Booking — Appointment Scheduling & Booking Calendar Problem Types: CWE-330 Description: The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to unauthorized booking cancellation in all versions up to, and including, 1.1.27. This is due to the plugin's "tfhb_meeting_form_submit_callback" function using insufficiently random values to generate booking cancellation tokens, combined with a globally shared nonce. This makes it possible
tly random values to generate booking cancellation tokens, combined with a globally shared nonce. This makes it possible for unauthenticated attackers to cancel arbitrary bookings via brute force attacks against the tfhb_meeting_form_cencel AJAX endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/490dd84f-7c03-43c7-b4e1-167fa2b15c03?source=cve - https://plugins.trac.wordpress.org/changeset/3392864/hydra-booking/tags/1.1.28/app/Shortcode/HydraBookingShortcode.php?old=3392467&old_path=hydra-booking%2Ftags%2F1.1.27%2Fapp%2FShortcode%2FHydraBookingShortcode.php
CVE ID: CVE-2025-12788 State: PUBLISHED Published: 2025-11-11T11:03:46.212Z Last Updated: 2025-11-14T15:29:25.151Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: themefic Products: Hydra Booking — Appointment Scheduling & Booking Calendar Problem Types: CWE-602 Description: The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to missing payment verification to unauthenticated payment bypass in all versions up to, and including, 1.1.27. This is due to the plugin accepting client-controlled payment confirmation data in the tfhb_meeting_paypal_payment_confirmation_callback function without server-side verification wi
confirmation data in the tfhb_meeting_paypal_payment_confirmation_callback function without server-side verification with PayPal's API. This makes it possible for unauthenticated attackers to bypass payment requirements and confirm bookings as paid without any actual payment transaction occurring. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b49ce4a2-52ad-4824-86fc-5edd2e33802d?source=cve - https://plugins.trac.wordpress.org/changeset/3392864/hydra-booking/tags/1.1.28/app/Shortcode/HydraBookingShortcode.php?old=3392467&old_path=hydra-booking%2Ftags%2F1.1.27%2Fapp%2FShortcode%2FHydraBookingShortcode.php
CVE ID: CVE-2025-12789 State: PUBLISHED Published: 2025-11-06T23:20:50.489Z Last Updated: 2025-11-07T17:59:33.792Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Red Hat Products: Red Hat Single Sign-On 7 Problem Types: CWE-601 Description: A flaw was found in Red Hat Single Sign-On. This issue is an Open Redirect vulnerability that occurs during the logout process. The redirect_uri parameter associated with the openid-connect logout protocol does not properly validate the provided URL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-12789 - https://bugzilla.redhat.com/show_bug.cgi?id=2413001
CVE ID: CVE-2025-12790 State: PUBLISHED Published: 2025-11-06T21:07:34.970Z Last Updated: 2025-11-08T04:55:19.808Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: Red Hat Satellite 6 Problem Types: CWE-29 Description: A flaw was found in Rubygem MQTT. By default, the package used to not have hostname validation, resulting in possible Man-in-the-Middle (MITM) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-12790 - https://bugzilla.redhat.com/show_bug.cgi?id=2413004 - https://github.com/njh/ruby-mqtt/blob/main/NEWS.md#ruby-mqtt-version-070-2025-10-29
CVE ID: CVE-2025-12792 State: PUBLISHED Published: 2025-11-18T00:18:00.348Z Last Updated: 2025-11-18T16:35:38.443Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: Canva Products: Canva Problem Types: CWE-276 Description: The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged access could execute arbitrary code that inherits the TCC (Transparency, Consent, and Control) permissions assigned to Canva. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://trust.canva.com/?tcuUid=1e77a34b-f586-450b-b30d-b6e17d15b443
CVE ID: CVE-2025-12800 State: PUBLISHED Published: 2025-11-23T22:26:39.686Z Last Updated: 2025-11-24T17:19:43.962Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: gn_themes Products: WP Shortcodes Plugin — Shortcodes Ultimate Problem Types: CWE-918 Description: The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.4.5 via the su_shortcode_csv_table function. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and m
d above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. If the 'Unsafe features' option is explicitly enabled by an administrator, this issue becomes exploitable by Contributor+ attackers Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5cbb7db4-bef7-4799-9b65-ebe77976e21c?source=cve - https://plugins.trac.wordpress.org/changeset/3397946/
CVE ID: CVE-2025-12808 State: PUBLISHED Published: 2025-11-06T16:36:14.506Z Last Updated: 2025-11-07T14:06:55.095Z Vendors: Devolutions Products: Server Problem Types: CWE-284 Description: Improper access control in Devolutions allows a View-only user to retrieve sensitive third-level nested fields, such as password lists custom values, resulting in password disclosure. This issue affects the following versions : * Devolutions Server 2025.3.2.0 through 2025.3.5.0 * Devolutions Server 2025.2.15.0 and earlier Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2025-0016
CVE ID: CVE-2025-12813 State: PUBLISHED Published: 2025-11-11T03:30:43.449Z Last Updated: 2025-11-14T15:31:22.875Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: strix-bubol5 Products: Holiday class post calendar Problem Types: CWE-94 Description: The Holiday class post calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.1 via the 'contents' parameter. This is due to a lack of sanitization of user-supplied data when creating a cache file. This makes it possible for unauthenticated attackers to execute code on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wo
attackers to execute code on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7f7968c4-589c-4949-9f69-4a0ba4db4ea9?source=cve - https://plugins.trac.wordpress.org/browser/holiday-class-post-calendar/trunk/holiday_class_post_calendar.php#L1234
CVE ID: CVE-2025-12814 State: PUBLISHED Published: 2025-11-19T05:45:15.686Z Last Updated: 2025-11-19T18:40:27.851Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: softaculous Products: SiteSEO – SEO Simplified Problem Types: CWE-285 Description: The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to unauthorized modification of data due to n incorrect capability check on the siteseo_reset_settings function in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, who have been granted access to at least on SiteSEO setting capability, to reset the plugin's settings. Additional Analyst Notes: - CISA ADP Vulnri
s to at least on SiteSEO setting capability, to reset the plugin's settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a376cafb-656c-4fe1-b5c1-c7e38dc5040e?source=cve - https://plugins.trac.wordpress.org/browser/siteseo/tags/1.3.2/main/ajax.php#L90 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3397272%40siteseo&new=3397272%40siteseo&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12815 State: PUBLISHED Published: 2025-11-06T17:10:34.559Z Last Updated: 2025-11-12T15:30:15.903Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: AWS Products: Research and Engineering Studio (RES) Problem Types: CWE-283 Description: An ownership verification issue in the Virtual Desktop preview page in the Research and Engineering Studio (RES) on AWS before version 2025.09 may allow an authenticated remote user to view another user's active desktop session metadata, including periodical desktop preview screenshots. To mitigate this issue, users should upgrade to version 2025.09 or above. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
gate this issue, users should upgrade to version 2025.09 or above. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://aws.amazon.com/security/security-bulletins/AWS-2025-026/ - https://github.com/aws/res/releases/tag/2025.09 - https://github.com/aws/res/security/advisories/GHSA-x3cx-g8g9-75hv
CVE ID: CVE-2025-12817 State: PUBLISHED Published: 2025-11-13T13:00:12.160Z Last Updated: 2025-11-13T13:59:54.599Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: PostgreSQL Problem Types: CWE-862 Description: Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.post
15.15, 14.20, and 13.23 are affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.postgresql.org/support/security/CVE-2025-12817/
CVE ID: CVE-2025-12818 State: PUBLISHED Published: 2025-11-13T13:00:12.911Z Last Updated: 2025-11-13T13:59:33.436Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: PostgreSQL Problem Types: CWE-190 Description: Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes. This results in a segmentation fault for the application using libpq. Versions before PostgreSQL 18.1, 17.7, 16.11, 15.15, 14.20, and 13.23 are affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
7.7, 16.11, 15.15, 14.20, and 13.23 are affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.postgresql.org/support/security/CVE-2025-12818/
CVE ID: CVE-2025-12822 State: PUBLISHED Published: 2025-11-19T05:45:15.251Z Last Updated: 2025-11-19T18:43:17.593Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: cyberlord92 Products: WP Login and Register using JWT Problem Types: CWE-862 Description: The WP Login and Register using JWT plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'mo_jwt_generate_new_api_key' function in all versions up to, and including, 3.0.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to generate a new API key on site's that do not have an API key configured and subsequently us
r-level access and above, to generate a new API key on site's that do not have an API key configured and subsequently use that to access restricted endpoints. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/966523a4-3d4b-444b-b9d0-63c72527a99f?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3397900%40login-register-using-jwt&new=3397900%40login-register-using-jwt&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12823 State: PUBLISHED Published: 2025-11-18T08:27:32.143Z Last Updated: 2025-11-18T15:25:27.633Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: sscovil Products: CSV to SortTable Problem Types: CWE-79 Description: The CSV to SortTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csv' shortcode in all versions up to, and including, 4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected pag
el access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/53c59793-27db-44fa-92c8-2184d6914d8f?source=cve - https://wordpress.com/plugins/csv-to-sorttable
CVE ID: CVE-2025-12827 State: PUBLISHED Published: 2025-11-18T08:27:33.413Z Last Updated: 2025-11-18T14:40:27.921Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: denishua Products: Top Friends Problem Types: CWE-352 Description: The Top Friends plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3. This is due to missing nonce validation on the top_friends_options_subpanel() function. This makes it possible for unauthenticated attackers to modify plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes:
ted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8165196d-0117-473f-8ccf-57ffd3e08e16?source=cve - https://plugins.trac.wordpress.org/browser/top-friends/tags/0.3/top-friends.php#L155
CVE ID: CVE-2025-12829 State: PUBLISHED Published: 2025-11-07T18:04:15.700Z Last Updated: 2025-11-07T18:13:55.938Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Amazon Products: Ion-C Problem Types: CWE-125 Description: An uninitialized stack read issue exists in Amazon Ion-C versions <v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version v1.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://aws.amazon.com/security/security-bulletins/AWS-2025-027/ - https://
otes: - CISA ADP Vulnrichment: References: - https://aws.amazon.com/security/security-bulletins/AWS-2025-027/ - https://github.com/amazon-ion/ion-c/releases/tag/v1.1.4 - https://github.com/amazon-ion/ion-c/security/advisories/GHSA-7mgf-6x73-5h7r
CVE ID: CVE-2025-12833 State: PUBLISHED Published: 2025-11-12T04:29:09.221Z Last Updated: 2025-11-12T18:16:20.350Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: paoltaia Products: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory Problem Types: CWE-639 Description: The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.139 via the 'post_attachment_upload' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with author-level access
ssing validation on a user controlled key. This makes it possible for authenticated attackers, with author-level access and above, to attach arbitrary image files to arbitrary places. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/408f0c2a-ef3c-4592-8722-d56afce92e24?source=cve - https://wordpress.org/plugins/geodirectory/ - https://github.com/AyeCode/geodirectory/commit/db655b04be32a160c0abf73217faf0a50585aa92 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3393024%40geodirectory&new=3393024%40geodirectory&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12837 State: PUBLISHED Published: 2025-11-08T09:28:10.706Z Last Updated: 2025-11-10T14:13:48.536Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: smub Products: aThemes Addons for Elementor Problem Types: CWE-79 Description: The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Call To Action widget in versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping on user-supplied values. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user
with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/75a3a8ee-42c6-4963-bb48-6794b310b861?source=cve - https://plugins.trac.wordpress.org/browser/athemes-addons-for-elementor-lite/tags/1.1.5/inc/modules/widgets/call-to-action/class-call-to-action.php#L938 - https://wordpress.org/plugins/athemes-addons-for-elementor-lite/#developers - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3391638%40athemes-addons-for-elementor-lite&old=3382628%40athemes-
ess.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3391638%40athemes-addons-for-elementor-lite&old=3382628%40athemes-addons-for-elementor-lite&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12842 State: PUBLISHED Published: 2025-11-19T05:45:10.444Z Last Updated: 2025-11-19T20:13:20.453Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: timeslotplugins Products: Booking Plugin for WordPress Appointments – Time Slot Problem Types: CWE-20 Description: The Booking Plugin for WordPress Appointments – Time Slot plugin for WordPress is vulnerable to unauthorized email sending in versions up to, and including, 1.4.7 due to missing validation on the tslot_appt_email AJAX action. This makes it possible for unauthenticated attackers to send appointment notification emails to arbitrary recipients with attacker-controlled text content in cert
attackers to send appointment notification emails to arbitrary recipients with attacker-controlled text content in certain email fields, potentially enabling the site to be abused for phishing campaigns or spam distribution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/087b6943-5da8-44fe-8614-832768444178?source=cve - https://plugins.trac.wordpress.org/browser/timeslot/tags/1.4.6/public/form/email.php#L21 - https://plugins.trac.wordpress.org/browser/timeslot/tags/1.4.6/public/form/email.php#L23 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3397527%40timeslot&new=3397527%40times
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3397527%40timeslot&new=3397527%40timeslot&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12844 State: PUBLISHED Published: 2025-11-13T07:27:53.931Z Last Updated: 2025-11-13T19:26:43.560Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: tigroumeow Products: AI Engine Problem Types: CWE-502 Description: The AI Engine plugin for WordPress is vulnerable to PHP Object Injection via PHAR Deserialization in all versions up to, and including, 3.1.8 via deserialization of untrusted input in the 'rest_simpleTranscribeAudio' and 'rest_simpleVisionQuery' functions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which m
criber-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c39c1b72-e3e0-44fb-8fb8-602cb0aa61e3?source=cve - https://github.com/jordymeow/ai-engine/blob/ma
ntel/vulnerabilities/id/c39c1b72-e3e0-44fb-8fb8-602cb0aa61e3?source=cve - https://github.com/jordymeow/ai-engine/blob/main/classes/modules/files.php#L237 - https://github.com/jordymeow/ai-engine/blob/main/classes/api.php#L799 - https://github.com/jordymeow/ai-engine/blob/main/classes/services/image.php#L43 - https://github.com/jordymeow/ai-engine/blob/main/classes/engines/chatml.php#L960-L967 - https://plugins.trac.wordpress.org/changeset/3392052/