Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-6989 State: PUBLISHED Published: 2025-07-26T07:23:51.894Z Last Updated: 2025-07-28T15:09:57.687Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: hogash Products: KALLYAS - Creative eCommerce Multi-Purpose WordPress Theme Problem Types: CWE-22 Description: The Kallyas theme for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the delete_font() function in all versions up to, and including, 4.21.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary folders on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
nd above, to delete arbitrary folders on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9a8a3607-4f2e-44fb-8141-75f7620508d4?source=cve - https://themeforest.net/item/kallyas-responsive-multipurpose-wordpress-theme/4091658
CVE ID: CVE-2025-6990 State: PUBLISHED Published: 2025-11-01T07:30:03.218Z Last Updated: 2025-11-03T13:30:17.631Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: hogash Products: KALLYAS - Creative eCommerce Multi-Purpose WordPress Theme Problem Types: CWE-94 Description: The kallyas theme for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.0 via the `TH_PhpCode` pagebuilder widget. This is due to the theme not restricting access to the code editor widget for non-administrators. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server. Additional Analy
le for authenticated attackers, with Contributor-level access and above, to execute code on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/721d29e4-397d-4965-bd64-33bced8e5de4?source=cve - https://my.hogash.com/changelog_category/kallyas-wordpress-theme/
CVE ID: CVE-2025-6991 State: PUBLISHED Published: 2025-07-26T07:23:52.298Z Last Updated: 2025-07-28T15:10:41.674Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: hogash Products: KALLYAS - Creative eCommerce Multi-Purpose WordPress Theme Problem Types: CWE-98 Description: The kallyas theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.21.0 via the 'TH_LatestPosts4` widget. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access contr
.php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/de1bcbea-5539-456f-94dc-c70fb7acc455?source=cve - https://themeforest.net/item/kallyas-responsive-multipurpose-wordpress-theme/4091658
CVE ID: CVE-2025-6992 State: REJECTED Published: N/A Last Updated: 2025-08-30T22:19:19.226Z Description: No description available.
CVE ID: CVE-2025-6993 State: PUBLISHED Published: 2025-07-16T09:22:56.563Z Last Updated: 2025-07-16T14:40:19.407Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: rustaurius Products: Ultimate WP Mail Problem Types: CWE-862 Description: The Ultimate WP Mail plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization within the get_email_log_details() AJAX handler in versions 1.0.17 to 1.3.6. The handler reads the client-supplied post_id and retrieves the corresponding email log post content (including the password-reset link), relying only on the ‘edit_posts’ capability without restricting to administrators or validating ownership.
reset link), relying only on the ‘edit_posts’ capability without restricting to administrators or validating ownership. This makes it possible for authenticated attackers, with Contributor-level access and above, to harvest an admin’s reset link and elevate their privileges to administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b19794de-b623-4017-bd91-73986383c58b?source=cve - https://wordpress.org/plugins/ultimate-wp-mail/#developers - https://plugins.trac.wordpress.org/browser/ultimate-wp-mail/tags/1.3.6/includes/Ajax.class.php - https://plugins.trac.wordpress.org/changeset/3328277
CVE ID: CVE-2025-6994 State: PUBLISHED Published: 2025-08-06T03:41:01.031Z Last Updated: 2025-08-06T19:29:22.342Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SmartDataSoft Products: Reveal Listing Problem Types: CWE-269 Description: The Reveal Listing plugin by smartdatasoft for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.3. This is due to the plugin allowing users who are registering new accounts to set their own role or by supplying 'listing_user_role' field. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the administrator role. Additional Analyst No
nticated attackers to gain elevated privileges by creating an account with the administrator role. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cd00d716-535c-41eb-a766-82079e0060e6?source=cve - https://themeforest.net/item/reveal-directory-listing-wordpress-theme/27704330
CVE ID: CVE-2025-6995 State: PUBLISHED Published: 2025-07-08T14:45:44.989Z Last Updated: 2025-07-08T15:54:49.209Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-257 Description: Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-July-2025-for-Ivanti-EPM-2024-SU2-and-EPM-2022-SU8
CVE ID: CVE-2025-6996 State: PUBLISHED Published: 2025-07-08T14:51:04.446Z Last Updated: 2025-07-08T15:14:08.808Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-257 Description: Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-July-2025-for-Ivanti-EPM-2024-SU2-and-EPM-2022-SU8
CVE ID: CVE-2025-6997 State: PUBLISHED Published: 2025-07-19T08:24:22.251Z Last Updated: 2025-07-21T18:09:51.284Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: ThemeREX Products: ThemeREX Addons Problem Types: CWE-79 Description: The ThemeREX Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.35.1.1 due to insufficient input sanitization and output escaping. The plugin’s SVG rendering routine calls the trx_addons_get_svg_from_file() function on an unvalidated 'svg' parameter supplied via the shortcode or Elementor widget settings, then outputs it via the trx_addons_show_layo
ed 'svg' parameter supplied via the shortcode or Elementor widget settings, then outputs it via the trx_addons_show_layout() function. Because there is no check on the URL’s origin, scheme, or the SVG content itself, authenticated attackers, with Contributor-level access and above, can supply a remote SVG and inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e1b19017-b2f0-4c3b-b263-1fbec6f1dce4?source=cve - https://themerex.net/wp/download_plugins/themerex-addons/
CVE ID: CVE-2025-6998 State: PUBLISHED Published: 2025-07-24T19:39:17.709Z Last Updated: 2025-07-25T13:17:33.295Z Vendors: Calibre Web, Autocaliweb Products: Calibre Web, Autocaliweb Problem Types: CWE-1333 Description: ReDoS in strip_whitespaces() function in cps/string_helper.py in Calibre Web and Autocaliweb allows unauthenticated remote attackers to cause denial of service via specially crafted username parameter that triggers catastrophic backtracking during login. This issue affects Calibre Web: 0.6.24 (Nicolette); Autocaliweb: from 0.7.0 before 0.7.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/megadeth - https://github.com/jane
yst Notes: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/megadeth - https://github.com/janeczku/calibre-web - https://github.com/gelbphoenix/autocaliweb
CVE ID: CVE-2025-6999 State: PUBLISHED Published: 2025-09-15T21:17:51.424Z Last Updated: 2025-09-16T15:41:45.704Z Vendors: WatchGuard Products: Fireware OS Problem Types: CWE-444 Description: An HTTP Request Smuggling [CWE-444] vulnerability in the Authentication portal of WatchGuard Fireware OS allows a remote attacker to evade request parameter sanitation and perform a reflected self-Cross-Site Scripting (XSS) attack.This issue affects Fireware OS: from 12.0 through 12.11.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00014
CVE ID: CVE-2025-7000 State: PUBLISHED Published: 2025-11-15T08:04:19.745Z Last Updated: 2025-11-17T20:14:12.187Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-201 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 17.6 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that, under specific conditions, could have allowed unauthorized users to view confidential branch names by accessing project issues with related merge requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-release
- CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/ - https://gitlab.com/gitlab-org/gitlab/-/issues/553129 - https://hackerone.com/reports/3214025
CVE ID: CVE-2025-7001 State: PUBLISHED Published: 2025-07-24T06:05:22.870Z Last Updated: 2025-07-24T13:36:37.546Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-1220 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 15.0 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed priviledged users to access certain resource_group information through the API which should have been unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/553163 - https://hackerone.com/reports/3223993
CVE ID: CVE-2025-7012 State: PUBLISHED Published: 2025-07-13T08:12:20.973Z Last Updated: 2025-07-14T20:11:08.143Z Vendors: Cato Networks Products: Cato Client Problem Types: CWE-59 Description: An issue in Cato Networks' CatoClient for Linux, before version 5.5, allows a local attacker to escalate privileges to root by exploiting improper symbolic link handling. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.catonetworks.com/hc/en-us/articles/28552501717405-CVE-2025-7012-Linux-Client-Local-Privilege-Escalation-via-Symbolic-Link-Handling
CVE ID: CVE-2025-7020 State: PUBLISHED Published: 2025-08-09T12:42:29.150Z Last Updated: 2025-08-11T15:54:36.036Z Vendors: BYD Products: DiLink OS Problem Types: CWE-656 Description: An incorrect encryption implementation vulnerability exists in the system log dump feature of BYD's DiLink 3.0 OS (e.g. in the model ATTO3). An attacker with physical access to the vehicle can bypass the encryption of log dumps on the In-Vehicle Infotainment (IVI) unit's storage. This allows the attacker to access and read system logs containing sensitive data, including personally identifiable information (PII) and location data. This vulnerability was introduced in a patch intended to fix CVE-2024-54728. Addit
information (PII) and location data. This vulnerability was introduced in a patch intended to fix CVE-2024-54728. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://asrg.io/security-advisories/cve-2025-7020/
CVE ID: CVE-2025-7021 State: PUBLISHED Published: 2025-07-10T19:09:40.590Z Last Updated: 2025-07-10T20:29:32.210Z Vendors: OpenAI Products: Operator Problem Types: CWE-451 Description: Fullscreen API Spoofing and UI Redressing in the handling of Fullscreen API and UI rendering in OpenAI Operator SaaS on Web allows a remote attacker to capture sensitive user input (e.g., login credentials, email addresses) via displaying a deceptive fullscreen interface with overlaid fake browser controls and a distracting element (like a cookie consent screen) to obscure fullscreen notifications, tricking the user into interacting with the malicious site. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
tions, tricking the user into interacting with the malicious site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/google/security-research/security/advisories/GHSA-mmgx-755h-wr74
CVE ID: CVE-2025-7022 State: PUBLISHED Published: 2025-07-25T06:00:05.172Z Last Updated: 2025-07-25T13:25:57.380Z Vendors: Unknown Products: My Reservation System Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c1021763-075b-40c7-801d-b5519828aabe/
CVE ID: CVE-2025-7025 State: PUBLISHED Published: 2025-08-05T13:37:17.720Z Last Updated: 2025-08-13T15:03:43.830Z Vendors: Rockwell Automation Products: Arena® Simulation Problem Types: CWE-122 Description: A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1731.html
CVE ID: CVE-2025-7026 State: PUBLISHED Published: 2025-07-11T15:27:34.960Z Last Updated: 2025-11-03T20:07:19.993Z Vendors: GIGABYTE Products: UEFI-GenericComponentSmmEntry Problem Types: CWE-822 Untrusted Pointer Dereference Description: A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used as an unchecked pointer in the CommandRcx0 function. If the contents at RBX match certain expected values (e.g., '$DB$' or '2DB$'), the function performs arbitrary writes to System Management RAM (SMRAM), leading to potential privilege escalation to System Management Mode (SMM) and persistent firmware compromise. Additional An
ding to potential privilege escalation to System Management Mode (SMM) and persistent firmware compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gigabyte.com/Support/Security - https://www.binarly.io/advisories/brly-dva-2025-008 - https://kb.cert.org/vuls/id/746790
CVE ID: CVE-2025-7027 State: PUBLISHED Published: 2025-07-11T15:24:26.568Z Last Updated: 2025-11-03T20:07:21.390Z Vendors: GIGABYTE Products: UEFI-GenericComponentSmmEntry Problem Types: CWE-822 Untrusted Pointer Dereference Description: A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control both the read and write addresses used by the CommandRcx1 function. The write target is derived from an unvalidated UEFI NVRAM variable (SetupXtuBufferAddress), while the write content is read from an attacker-controlled pointer based on the RBX register. This dual-pointer dereference enables arbitrary memory writes within System Management RAM (SMRAM), lead
e RBX register. This dual-pointer dereference enables arbitrary memory writes within System Management RAM (SMRAM), leading to potential SMM privilege escalation and firmware compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gigabyte.com/Support/Security - https://www.binarly.io/advisories/brly-2025-009 - https://kb.cert.org/vuls/id/746790
CVE ID: CVE-2025-7028 State: PUBLISHED Published: 2025-07-11T15:26:11.382Z Last Updated: 2025-11-03T20:07:22.755Z Vendors: GIGABYTE Products: UEFI-SmiFlash Problem Types: CWE-822 Untrusted Pointer Dereference Description: A vulnerability in the Software SMI handler (SwSmiInputValue 0x20) allows a local attacker to supply a crafted pointer (FuncBlock) through RBX and RCX register values. This pointer is passed unchecked into multiple flash management functions (ReadFlash, WriteFlash, EraseFlash, and GetFlashInfo) that dereference both the structure and its nested members, such as BufAddr. This enables arbitrary read/write access to System Management RAM (SMRAM), allowing an attacker to corrup
ch as BufAddr. This enables arbitrary read/write access to System Management RAM (SMRAM), allowing an attacker to corrupt firmware memory, exfiltrate SMRAM content via flash, or install persistent implants. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gigabyte.com/Support/Security - https://www.binarly.io/advisories/brly-dva-2025-010 - https://kb.cert.org/vuls/id/746790
CVE ID: CVE-2025-7029 State: PUBLISHED Published: 2025-07-11T15:22:12.577Z Last Updated: 2025-11-03T20:07:24.142Z Vendors: GIGABYTE Products: UEFI-OverClockSmiHandler Problem Types: CWE-822 uncontrolled pointer deference Description: A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control the RBX register, which is used to derive pointers (OcHeader, OcData) passed into power and thermal configuration logic. These buffers are not validated before performing multiple structured memory writes based on OcSetup NVRAM values, enabling arbitrary SMRAM corruption and potential SMM privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: -
arbitrary SMRAM corruption and potential SMM privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gigabyte.com/Support/Security - https://www.binarly.io/advisories/brly-dva-2025-011 - https://kb.cert.org/vuls/id/746790
CVE ID: CVE-2025-7030 State: PUBLISHED Published: 2025-07-08T20:54:13.917Z Last Updated: 2025-07-09T14:23:22.669Z Vendors: Drupal Products: Two-factor Authentication (TFA) Problem Types: CWE-267 Description: Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.11.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-085
CVE ID: CVE-2025-7031 State: PUBLISHED Published: 2025-07-08T20:54:28.253Z Last Updated: 2025-07-10T14:15:57.161Z Vendors: Drupal Products: Config Pages Viewer Problem Types: CWE-306 Description: Missing Authentication for Critical Function vulnerability in Drupal Config Pages Viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Config Pages Viewer: from 0.0.0 before 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-086
CVE ID: CVE-2025-7032 State: PUBLISHED Published: 2025-08-05T13:39:32.769Z Last Updated: 2025-08-13T15:03:42.573Z Vendors: Rockwell Automation Products: Arena® Simulation Problem Types: CWE-121 Description: A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1731.html
CVE ID: CVE-2025-7033 State: PUBLISHED Published: 2025-08-05T13:42:37.178Z Last Updated: 2025-08-13T15:03:41.266Z Vendors: Rockwell Automation Products: Arena® Simulation Problem Types: CWE-122 Description: A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to read and write past the end of memory space. Successful use requires user action, such as opening a bad file or webpage. If used, a threat actor could execute code or disclose information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1731.html
CVE ID: CVE-2025-7035 State: PUBLISHED Published: 2025-07-16T09:22:56.957Z Last Updated: 2025-07-16T14:40:14.632Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: dglingren Products: Media Library Assistant Problem Types: CWE-79 Description: The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mla_tag_cloud and mla_term_list shortcodes in all versions up to, and including, 3.26 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that w
le for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b6e02a2b-9033-4022-a7d7-1c81a7f02f83?source=cve - https://plugins.trac.wordpress.org/browser/media-library-assistant/tags/3.26/includes/class-mla-shortcodes.php - https://plugins.trac.wordpress.org/browser/media-library-assistant/tags/3.26/includes/class-mla-shortcode-term-list.php - https://plugins.trac.wordpress.org/browser/media-library-assistant/tags/3.26/includes/class-mla-shortcode-tag-cloud.p
- https://plugins.trac.wordpress.org/browser/media-library-assistant/tags/3.26/includes/class-mla-shortcode-tag-cloud.php - https://plugins.trac.wordpress.org/changeset/3327861
CVE ID: CVE-2025-7036 State: PUBLISHED Published: 2025-08-06T01:45:11.881Z Last Updated: 2025-08-06T16:03:35.654Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: cleverreach43 Products: CleverReach® WP Problem Types: CWE-89 Description: The CleverReach® WP plugin for WordPress is vulnerable to time-based SQL Injection via the ‘title’ parameter in all versions up to, and including, 1.5.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive i