Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-5917 State: PUBLISHED Published: 2025-06-09T19:49:13.204Z Last Updated: 2025-11-21T07:32:51.423Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-787 Description: A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memor
file names. This can lead to a 1-byte write overflow. While seemingly small, such an overflow can corrupt adjacent memory, leading to unpredictable program behavior, crashes, or in specific circumstances, could be leveraged as a building block for more sophisticated exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-5917 - https://bugzilla.redhat.com/show_bug.cgi?id=2370874 - https://github.com/libarchive/libarchive/pull/2588 - https://github.com/libarchive/libarchive/releases/tag/v3.8.0
CVE ID: CVE-2025-5918 State: PUBLISHED Published: 2025-06-09T19:49:13.544Z Last Updated: 2025-11-21T07:33:01.357Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-125 Description: A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictabl
or reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including unpredictable program behavior, memory corruption, or a denial-of-service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-5918 - https://bugzilla.redhat.com/show_bug.cgi?id=2370877 - https://github.com/libarchive/libarchive/pull/2584 - https://github.com/libarchive/libarchive/releases/tag/v3.8.0
CVE ID: CVE-2025-5920 State: PUBLISHED Published: 2025-07-04T09:52:44.124Z Last Updated: 2025-07-08T17:38:34.095Z Vendors: Unknown Products: Sharable Password Protected Posts Problem Types: CWE-201 Insertion of Sensitive Information Into Sent Data Description: The Sharable Password Protected Posts before version 1.1.1 allows access to password protected posts by providing a secret key in a GET parameter. However, the key is exposed by the REST API. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/dddd6074-1e1f-441f-86f7-316c30262c70/
CVE ID: CVE-2025-5921 State: PUBLISHED Published: 2025-08-01T06:00:02.201Z Last Updated: 2025-08-01T13:39:38.917Z Vendors: Unknown Products: SureForms Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The SureForms WordPress plugin before 1.7.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against both authenticated and unauthenticated users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/052fb6cf-274e-468b-a7e0-0e7a1751ec75/
CVE ID: CVE-2025-5922 State: PUBLISHED Published: 2025-07-29T16:54:43.730Z Last Updated: 2025-07-29T18:27:35.763Z Vendors: TSplus Products: TSplus Remote Access Problem Types: CWE-522, CWE-759 Description: Access to TSplus Remote Access Admin Tool is restricted to administrators (unless "Disable UAC" option is enabled) and requires a PIN code. In versions below v18.40.6.17 the PIN's hash is stored in a system registry accessible to regular users, making it possible to perform a brute-force attack using rainbow tables, since the hash is not salted. LTS (Long-Term Support) versions also received patches in v17.2025.6.27 and v16.2025.6.27 releases. Additional Analyst Notes: - CISA ADP Vulnrichm
rsions also received patches in v17.2025.6.27 and v16.2025.6.27 releases. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/07/CVE-2025-5922
CVE ID: CVE-2025-5923 State: PUBLISHED Published: 2025-06-13T06:41:23.711Z Last Updated: 2025-06-13T14:01:46.170Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: marcdk Products: Game Review Block Problem Types: CWE-79 Description: The Game Review Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in all versions up to, and including, 4.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analys
to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/88520d8e-8e13-4b58-9df3-3b99afd39144?source=cve - https://plugins.trac.wordpress.org/browser/game-review-block/tags/4.7.0/src/game-table/callback.php#L38 - https://wordpress.org/plugins/game-review-block/#developers - https://github.com/mtoensing/game-review-block/commit/135aa118b75db5242df7fd1ef13cc09ec3410f3a
CVE ID: CVE-2025-5924 State: PUBLISHED Published: 2025-07-04T01:44:05.301Z Last Updated: 2025-07-07T15:02:10.127Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: skywaveinfo Products: WP Firebase Push Notification Problem Types: CWE-352 Description: The WP Firebase Push Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.0. This is due to missing or incorrect nonce validation on the wfpn_brodcast_notification_message() function. This makes it possible for unauthenticated attackers to send broadcast notifications via a forged request granted they can trick a site administrator into performing
tackers to send broadcast notifications via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/996e0432-e795-4c01-8182-603a47f4f341?source=cve - https://plugins.trac.wordpress.org/browser/wp-push-notification-firebase/trunk/wp_push_notification_firebase.php#L67
CVE ID: CVE-2025-5925 State: PUBLISHED Published: 2025-06-10T03:41:37.078Z Last Updated: 2025-06-10T13:10:05.275Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: steph Products: Bunny’s Print CSS Problem Types: CWE-352 Description: The Bunny’s Print CSS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.95. This is due to missing or incorrect nonce validation on the pcss_options_subpanel() function. This makes it possible for unauthenticated attackers to update settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst
est granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/53282bec-cd47-4db4-8ffe-6647521c0d49?source=cve - https://plugins.trac.wordpress.org/browser/bunnys-print-css/trunk/print-css.php#L49
CVE ID: CVE-2025-5926 State: PUBLISHED Published: 2025-06-13T01:47:48.104Z Last Updated: 2025-06-13T14:03:46.794Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: jconti Products: Link Shield Problem Types: CWE-352 Description: The Link Shield plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.4. This is due to missing or incorrect nonce validation on the link_shield_menu_options() function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on
scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7e577828-4368-4781-877b-badb4dc50763?source=cve - https://plugins.trac.wordpress.org/browser/link-shield/trunk/link-shield.php#L24
CVE ID: CVE-2025-5927 State: PUBLISHED Published: 2025-06-25T09:21:40.614Z Last Updated: 2025-06-25T13:37:37.158Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: WPEverest Products: Everest Forms Pro Problem Types: CWE-36 Description: The Everest Forms (Pro) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_entry_files() function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The vulnerability requires
easily lead to remote code execution when the right file is deleted (such as wp-config.php). The vulnerability requires an admin to trigger the deletion via deletion of a form entry and cannot be carried out by the attacker alone. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9e3a118f-4321-4579-a986-05ce077dc6b9?source=cve - https://wordpress.org/plugins/everest-forms/ - https://everestforms.net/changelog/
CVE ID: CVE-2025-5928 State: PUBLISHED Published: 2025-06-13T01:47:51.287Z Last Updated: 2025-06-23T16:08:29.900Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: fay-1 Products: WP Sliding Login/Dashboard Panel Problem Types: CWE-352 Description: The WP Sliding Login/Dashboard Panel plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1. This is due to missing or incorrect nonce validation on the wp_sliding_panel_user_options() function. This makes it possible for unauthenticated attackers to update plugin settings via a forged request granted they can trick a site administrator into performing an action
rs to update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ee7c679e-392c-40cd-b768-d78fae6065bb?source=cve - https://plugins.trac.wordpress.org/browser/wp-sliding-logindashboard-panel/trunk/wp-sliding-login-dashboard-panel.php#L245
CVE ID: CVE-2025-5929 State: PUBLISHED Published: 2025-06-26T02:22:20.215Z Last Updated: 2025-06-26T13:25:11.359Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: zourbuth Products: The Countdown – Block Countdown Timer Problem Types: CWE-79 Description: The The Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘clientId’ parameter in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/34578df8-661c-4c54-b06c-e1d787ca3c55?source=cve - https://plugins.trac.wordpress.org/browser/the-countdown/tags/2.0.1/the-countdown.php#L95 - https://wordpress.org/plugins/the-countdown/#developers
CVE ID: CVE-2025-5930 State: PUBLISHED Published: 2025-06-13T01:47:48.918Z Last Updated: 2025-06-13T14:03:11.421Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: digitalacornjp Products: WP2HTML Problem Types: CWE-352 Description: The WP2HTML plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation on the save() function. This makes it possible for unauthenticated attackers to update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP V
trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ac34e369-de9e-4b13-8858-0b4300aef5f8?source=cve - https://plugins.trac.wordpress.org/browser/wp2html/trunk/classes/admin.class.php#L39 - https://plugins.trac.wordpress.org/browser/wp2html/trunk/classes/main.class.php#L18
CVE ID: CVE-2025-5931 State: PUBLISHED Published: 2025-08-26T05:07:47.410Z Last Updated: 2025-08-26T15:40:18.405Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: wedevs Products: Dokan Pro Problem Types: CWE-269 Description: The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.5. This is due to the plugin not properly validating a user's identity prior to updating their password during a staff password reset. This makes it possible for authenticated attackers, with vendor-level access and above, to elevate their privilege to the level of a staff member and then change arbitrary
with vendor-level access and above, to elevate their privilege to the level of a staff member and then change arbitrary user passwords, including those of administrators in order to gain access to their accounts. By default, the plugin allows customers to become vendors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f3664a96-4ce7-4561-9b4b-dff91cd49384?source=cve - https://dokan.co/wordpress/
CVE ID: CVE-2025-5932 State: PUBLISHED Published: 2025-06-26T02:22:20.947Z Last Updated: 2025-06-26T13:24:37.624Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: coolrunner Products: Homerunner Problem Types: CWE-352 Description: The Homerunner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.29. This is due to missing or incorrect nonce validation on the main_settings() function. This makes it possible for unauthenticated attackers to update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes:
ted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/36eaff34-50cd-4399-8314-19ae4f50d017?source=cve - https://plugins.trac.wordpress.org/browser/homerunner-smartcheckout/tags/1.0.29/classes/class-settings.php#L319
CVE ID: CVE-2025-5933 State: PUBLISHED Published: 2025-07-04T01:44:00.174Z Last Updated: 2025-07-08T17:39:27.519Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: richarddev7 Products: RD Contacto Problem Types: CWE-352 Description: The RD Contacto plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce validation on the rdWappUpdateData() function. This makes it possible for unauthenticated attackers to update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Note
ranted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/113b3093-18fe-40ae-85af-aae1945201db?source=cve - https://plugins.trac.wordpress.org/browser/rd-wapp/trunk/includes/rdwapp-class.php#L35
CVE ID: CVE-2025-5934 State: PUBLISHED Published: 2025-06-10T03:31:08.622Z Last Updated: 2025-06-10T13:11:09.832Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C) Vendors: Netgear Products: EX3700 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Netgear EX3700 up to 1.0.0.88. It has been classified as critical. Affected is the function sub_41619C of the file /mtd. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.0.98 is able to address this issue. It is recommended to upgrade the affected component. This vulnerab
ng to version 1.0.0.98 is able to address this issue. It is recommended to upgrade the affected component. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311712 - https://vuldb.com/?ctiid.311712 - https://vuldb.com/?submit.588258 - https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex3700-netgear - https://github.com/xiaobor123/vul-finds/tree/main/vul-find-ex3700-netgear#poc - https://www.netgear.com/
CVE ID: CVE-2025-5935 State: PUBLISHED Published: 2025-06-10T04:33:57.358Z Last Updated: 2025-06-10T14:42:05.950Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: Open5GS Problem Types: CWE-404 Description: A vulnerability was found in Open5GS up to 2.7.3. It has been declared as problematic. Affected by this vulnerability is the function common_register_state of the file src/mme/emm-sm.c of the component AMF/MME. The manipulation of the argument ran_ue_id leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 62cb99755243c9c38e4c
otely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 62cb99755243c9c38e4c060c5d8d0e158fe8cdd5. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311713 - https://vuldb.com/?ctiid.311713 - https://vuldb.com/?submit.589354 - https://github.com/open5gs/open5gs/issues/3874 - https://github.com/open5gs/open5gs/issues/3874#issuecomment-2853547622 - https://github.com/user-attachments/files/19863206/Problematic.handover.required.process.zip - https://github.com/open5gs/open5gs/commit/62cb99755243c9c38e4c060c5d8d0e158fe8cdd5
CVE ID: CVE-2025-5936 State: PUBLISHED Published: 2025-06-27T07:22:23.312Z Last Updated: 2025-06-27T13:44:49.401Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: innate-images-llc Products: VR Calendar Problem Types: CWE-352 Description: The VR Calendar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.7. This is due to missing or incorrect nonce validation on the syncCalendar() function. This makes it possible for unauthenticated attackers to trigger a calendar sync via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst
est granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/57dbafe8-dcb3-4ac9-ad5e-76baf1963850?source=cve - https://plugins.trac.wordpress.org/browser/vr-calendar-sync/trunk/Admin/Classes/VRCalendarAdmin.class.php#L98
CVE ID: CVE-2025-5937 State: PUBLISHED Published: 2025-06-28T07:25:06.195Z Last Updated: 2025-06-30T18:33:07.467Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: videowhisper Products: MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet Problem Types: CWE-352 Description: The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.0. This is due to missing or incorrect nonce validation on the adminOptions() function. This makes it possible for unauthenticated attackers to reset the plugin's settings
ion on the adminOptions() function. This makes it possible for unauthenticated attackers to reset the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d80417bc-2bb2-4826-be03-796a7cd2825f?source=cve - https://plugins.trac.wordpress.org/browser/paid-membership/trunk/inc/options.php#L1364 - https://plugins.trac.wordpress.org/changeset/3318389/#file0
CVE ID: CVE-2025-5938 State: PUBLISHED Published: 2025-06-13T01:47:50.908Z Last Updated: 2025-06-13T15:29:43.697Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: themebon Products: Digital Marketing and Agency Templates Addons for Elementor Problem Types: CWE-352 Description: The Digital Marketing and Agency Templates Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the import_templates() function. This makes it possible for unauthenticated attackers to trigger an import via a forged request granted they can trick a site a
akes it possible for unauthenticated attackers to trigger an import via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e3447438-1624-451a-a50c-981021399198?source=cve - https://plugins.trac.wordpress.org/browser/digital-marketing-agency-templates-for-elementor/trunk/includes/importer.php#L242
CVE ID: CVE-2025-5939 State: PUBLISHED Published: 2025-06-13T01:47:50.112Z Last Updated: 2025-06-13T15:39:55.852Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: amir-mousavi Products: Telegram for WP Problem Types: CWE-79 Description: The Telegram for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects m
o inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cf4a3171-f041-40ce-8148-239c24d7ce95?source=cve - https://wordpress.org/plugins/telegram-for-wp/#developers