Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-32663 State: PUBLISHED Published: 2025-04-11T08:43:02.352Z Last Updated: 2025-04-11T13:30:54.381Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: roninwp Products: FAT Cooming Soon Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Cooming Soon allows PHP Local File Inclusion. This issue affects FAT Cooming Soon: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fat-coming-soon/vulnerability/wordpress-fat-cooming-soon-plugin-1-1-local-file-incl
hstack.com/database/wordpress/plugin/fat-coming-soon/vulnerability/wordpress-fat-cooming-soon-plugin-1-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32664 State: PUBLISHED Published: 2025-04-09T16:09:19.309Z Last Updated: 2025-04-09T18:53:25.950Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ashokbasnet Products: Nepali Date Utilities Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ashokbasnet Nepali Date Utilities allows Stored XSS. This issue affects Nepali Date Utilities: from n/a through 1.0.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/nepali-date-utilities/vulnerability/wordpress-nepali-date-utilities-plugin-1-0-13-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32665 State: PUBLISHED Published: 2025-04-17T15:47:00.870Z Last Updated: 2025-04-17T18:38:53.243Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: WebbyTemplate Products: Office Locator Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WebbyTemplate Office Locator allows SQL Injection. This issue affects Office Locator: from n/a through 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/office-locator/vulnerability/wordpress-office-locator-plugin-1-3-0-sql-injection-vulnerability?_s_id=
e/wordpress/plugin/office-locator/vulnerability/wordpress-office-locator-plugin-1-3-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32666 State: PUBLISHED Published: 2025-04-17T15:47:00.288Z Last Updated: 2025-04-17T18:39:01.208Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Hive Support Products: Hive Support Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hive Support Hive Support allows Reflected XSS. This issue affects Hive Support: from n/a through 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hive-support/vulnerability/wordpress-hive-support-plugin-1-2-2-reflected-cross-site-scripting-xss-vulnerability?_
plugin/hive-support/vulnerability/wordpress-hive-support-plugin-1-2-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32667 State: PUBLISHED Published: 2025-04-09T16:09:18.672Z Last Updated: 2025-04-09T18:07:26.157Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: fromdoppler Products: Doppler Forms Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in fromdoppler Doppler Forms allows Stored XSS. This issue affects Doppler Forms: from n/a through 2.4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/doppler-form/vulnerability/wordpress-doppler-forms-plugin-2-4-5-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32668 State: PUBLISHED Published: 2025-04-10T08:09:40.484Z Last Updated: 2025-04-10T13:17:13.549Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Rameez Iqbal Products: Real Estate Manager Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Rameez Iqbal Real Estate Manager allows PHP Local File Inclusion. This issue affects Real Estate Manager: from n/a through 7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/real-estate-manager/vulnerability/wordpress-real-estate-manager-
ces: - https://patchstack.com/database/wordpress/plugin/real-estate-manager/vulnerability/wordpress-real-estate-manager-plugin-7-3-local-file-inclusion-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-32669 State: PUBLISHED Published: 2025-04-09T16:09:17.859Z Last Updated: 2025-04-09T18:07:38.628Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: MERGADO Products: Mergado Pack Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in MERGADO Mergado Pack allows Stored XSS. This issue affects Mergado Pack: from n/a through 4.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mergado-marketing-pack/vulnerability/wordpress-mergado-pack-plugin-4-0-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32670 State: PUBLISHED Published: 2025-04-17T15:46:59.578Z Last Updated: 2025-04-17T18:39:11.864Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Mark Parnell Products: Spark GF Failed Submissions Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark Parnell Spark GF Failed Submissions allows Reflected XSS. This issue affects Spark GF Failed Submissions: from n/a through 1.3.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/spark-gf-failed-submissions/vulnerability/wordpress-spark-gf-failed-
- https://patchstack.com/database/wordpress/plugin/spark-gf-failed-submissions/vulnerability/wordpress-spark-gf-failed-submissions-plugin-1-3-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32671 State: PUBLISHED Published: 2025-04-11T08:43:02.559Z Last Updated: 2025-04-11T13:29:02.230Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: John Weissberg Products: Print Science Designer Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in John Weissberg Print Science Designer allows Path Traversal. This issue affects Print Science Designer: from n/a through 1.3.155. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/print-science-designer/vulnerability/wordpress-print-science-designer-plugin-1-3-1
chstack.com/database/wordpress/plugin/print-science-designer/vulnerability/wordpress-print-science-designer-plugin-1-3-155-arbitrary-file-download-vulnerability?_s_id=cve
CVE ID: CVE-2025-32672 State: PUBLISHED Published: 2025-04-11T08:43:02.771Z Last Updated: 2025-04-11T14:47:53.706Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: g5theme Products: Ultimate Bootstrap Elements for Elementor Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in g5theme Ultimate Bootstrap Elements for Elementor allows PHP Local File Inclusion. This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ultima
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ultimate-bootstrap-elements-for-elementor/vulnerability/wordpress-ultimate-bootstrap-elements-for-elementor-plugin-1-4-9-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32673 State: PUBLISHED Published: 2025-04-09T16:09:17.194Z Last Updated: 2025-04-09T18:07:49.369Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: epeken Products: Epeken All Kurir Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in epeken Epeken All Kurir allows Stored XSS. This issue affects Epeken All Kurir: from n/a through 1.4.6.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/epeken-all-kurir/vulnerability/wordpress-epeken-all-kurir-plugin-1-4-6-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32674 State: PUBLISHED Published: 2025-04-17T15:46:58.955Z Last Updated: 2025-04-17T18:39:20.839Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WPFactory Products: Product Excel Import Export & Bulk Edit for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Product Excel Import Export & Bulk Edit for WooCommerce allows Reflected XSS. This issue affects Product Excel Import Export & Bulk Edit for WooCommerce: from n/a through 4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress
through 4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/webd-woocommerce-product-excel-importer-bulk-edit/vulnerability/wordpress-product-excel-import-export-bulk-edit-for-woocommerce-plugin-4-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32675 State: PUBLISHED Published: 2025-04-09T16:09:16.556Z Last Updated: 2025-04-09T18:08:02.093Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: QuantumCloud Products: SEO Help Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in QuantumCloud SEO Help allows Server Side Request Forgery. This issue affects SEO Help: from n/a through 6.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/seo-help/vulnerability/wordpress-seo-help-plugin-6-6-0-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-32676 State: PUBLISHED Published: 2025-04-09T16:09:15.913Z Last Updated: 2025-04-09T18:08:18.667Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: Picture-Planet GmbH Products: Verowa Connect Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Picture-Planet GmbH Verowa Connect allows Blind SQL Injection. This issue affects Verowa Connect: from n/a through 3.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/verowa-connect/vulnerability/wordpress-verowa-connect-plugin-3-0-5-sql-injection-vulner
ck.com/database/wordpress/plugin/verowa-connect/vulnerability/wordpress-verowa-connect-plugin-3-0-5-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32677 State: PUBLISHED Published: 2025-04-09T16:09:15.311Z Last Updated: 2025-04-09T18:08:30.955Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: solwininfotech Products: WP Social Stream Designer Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in solwininfotech WP Social Stream Designer allows Blind SQL Injection. This issue affects WP Social Stream Designer: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/social-stream-design/vulnerability/wordpress-wp-social-stream-desi
s: - https://patchstack.com/database/wordpress/plugin/social-stream-design/vulnerability/wordpress-wp-social-stream-designer-plugin-1-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32678 State: PUBLISHED Published: 2025-04-09T16:09:14.684Z Last Updated: 2025-04-09T18:08:45.915Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Ashish Ajani Products: WP Show Stats Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ashish Ajani WP Show Stats allows Cross Site Request Forgery. This issue affects WP Show Stats: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-show-stats/vulnerability/wordpress-wp-show-stats-plugin-1-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-32679 State: PUBLISHED Published: 2025-04-09T16:09:14.030Z Last Updated: 2025-04-09T18:08:59.562Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: ZealousWeb Products: User Registration Using Contact Form 7 Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ZealousWeb User Registration Using Contact Form 7 allows Cross Site Request Forgery. This issue affects User Registration Using Contact Form 7: from n/a through 2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/user-registration-using-contact-form-7/vulnerability/wordpress-user-registra
://patchstack.com/database/wordpress/plugin/user-registration-using-contact-form-7/vulnerability/wordpress-user-registration-using-contact-form-7-plugin-2-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-32680 State: PUBLISHED Published: 2025-04-09T16:09:13.264Z Last Updated: 2025-04-09T18:09:12.832Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Grade Us, Inc. Products: Review Stream Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Grade Us, Inc. Review Stream allows Stored XSS. This issue affects Review Stream: from n/a through 1.6.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/review-stream/vulnerability/wordpress-review-stream-plugin-1-6-7-cross-site-scripting-xss-vulnerability?_s_
press/plugin/review-stream/vulnerability/wordpress-review-stream-plugin-1-6-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32681 State: PUBLISHED Published: 2025-04-11T08:43:03.157Z Last Updated: 2025-04-11T14:39:17.060Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: WP Guru Products: Error Log Viewer Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Guru Error Log Viewer allows Blind SQL Injection. This issue affects Error Log Viewer: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/error-log-viewer-wp/vulnerability/wordpress-error-log-viewer-by-wp-guru-plugin-1-0-5-sql-injection-vulner
rdpress/plugin/error-log-viewer-wp/vulnerability/wordpress-error-log-viewer-by-wp-guru-plugin-1-0-5-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32682 State: PUBLISHED Published: 2025-04-17T15:46:58.355Z Last Updated: 2025-04-17T18:39:32.087Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: RomanCode Products: MapSVG Lite Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG Lite allows Upload a Web Shell to a Web Server. This issue affects MapSVG Lite: from n/a through 8.5.34. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mapsvg-lite-interactive-vector-maps/vulnerability/wordpress-mapsvg-lite-plugin-8-5-32-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-32683 State: PUBLISHED Published: 2025-04-09T16:09:12.288Z Last Updated: 2025-04-09T18:09:23.945Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: RomanCode Products: MapSVG Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG Lite allows DOM-Based XSS. This issue affects MapSVG Lite: from n/a through 8.5.32. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mapsvg-lite-interactive-vector-maps/vulnerability/wordpress-mapsvg-lite-plugin-8-5-32-cross-site-scripting-xss-vulnerab
/mapsvg-lite-interactive-vector-maps/vulnerability/wordpress-mapsvg-lite-plugin-8-5-32-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32684 State: PUBLISHED Published: 2025-04-09T16:09:11.637Z Last Updated: 2025-04-09T18:09:36.562Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: RomanCode Products: MapSVG Lite Problem Types: CWE-862 Description: Missing Authorization vulnerability in RomanCode MapSVG Lite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MapSVG Lite: from n/a through 8.5.32. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mapsvg-lite-interactive-vector-maps/vulnerability/wordpress-mapsvg-lite-plugin-8-5-32-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-32685 State: PUBLISHED Published: 2025-04-09T16:09:10.967Z Last Updated: 2025-04-09T18:09:50.441Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: Aristo Rinjuang Products: WP Inquiries Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aristo Rinjuang WP Inquiries allows SQL Injection. This issue affects WP Inquiries: from n/a through 0.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-inquiries/vulnerability/wordpress-wp-inquiries-0-2-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32686 State: PUBLISHED Published: 2025-04-17T15:46:57.736Z Last Updated: 2025-04-17T18:39:41.435Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: WP Speedo Products: Team Members Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in WP Speedo Team Members allows Object Injection. This issue affects Team Members: from n/a through 3.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wps-team/vulnerability/wordpress-team-members-3-4-0-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32687 State: PUBLISHED Published: 2025-04-10T08:09:40.702Z Last Updated: 2025-04-10T13:16:33.867Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Magnigenie Products: Review Stars Count For WooCommerce Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Magnigenie Review Stars Count For WooCommerce allows SQL Injection. This issue affects Review Stars Count For WooCommerce: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/review-stars-count-for-woocommerce/vulnerability/word
nt: References: - https://patchstack.com/database/wordpress/plugin/review-stars-count-for-woocommerce/vulnerability/wordpress-review-stars-count-for-woocommerce-2-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32688 State: PUBLISHED Published: 2025-09-09T16:25:31.186Z Last Updated: 2025-09-09T18:41:12.008Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Sovica Products: Target Video Easy Publish Problem Types: CWE-862 Description: Missing Authorization vulnerability in Sovica Target Video Easy Publish. This issue affects Target Video Easy Publish: from n/a through 3.8.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/brid-video-easy-publish/vulnerability/wordpress-target-video-easy-publish-plugin-3-8-5-arbitrary-shortcode-execution-vulnerability?_s_id=cve
CVE ID: CVE-2025-32689 State: PUBLISHED Published: 2025-09-09T16:25:31.773Z Last Updated: 2025-09-09T18:41:06.167Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: ThemesGrove Products: WP SmartPay Problem Types: CWE-1284 Description: Improper Validation of Specified Quantity in Input vulnerability in ThemesGrove WP SmartPay. This issue affects WP SmartPay: from n/a through 2.7.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smartpay/vulnerability/wordpress-download-manager-and-payment-form-2-7-12-other-vulnerability-type-vulnerability?_s_id=cve
CVE ID: CVE-2025-32690 State: PUBLISHED Published: 2025-04-09T16:09:10.294Z Last Updated: 2025-05-05T17:07:24.097Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Angelo Mandato Products: PowerPress Podcasting Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Angelo Mandato PowerPress Podcasting allows DOM-Based XSS.This issue affects PowerPress Podcasting: from n/a through 11.12.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/powerpress/vulnerability/wordpress-powerpress-podcasting-11-12-4-cross-site-scr
patchstack.com/database/wordpress/plugin/powerpress/vulnerability/wordpress-powerpress-podcasting-11-12-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32691 State: PUBLISHED Published: 2025-04-09T16:09:09.697Z Last Updated: 2025-04-09T18:10:13.742Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Angelo Mandato Products: PowerPress Podcasting Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Angelo Mandato PowerPress Podcasting allows Server Side Request Forgery. This issue affects PowerPress Podcasting: from n/a through 11.12.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/powerpress/vulnerability/wordpress-powerpress-podcasting-11-12-4-server-side-request-forgery-ssrf-vulnerability?_
plugin/powerpress/vulnerability/wordpress-powerpress-podcasting-11-12-4-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-32692 State: PUBLISHED Published: 2025-04-09T16:09:08.930Z Last Updated: 2025-04-09T18:10:27.238Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: WP Shuffle Products: WP Subscription Forms Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle WP Subscription Forms allows PHP Local File Inclusion. This issue affects WP Subscription Forms: from n/a through 1.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-subscription-forms/vulnerability/wordpress-wp-subscriptio
erences: - https://patchstack.com/database/wordpress/plugin/wp-subscription-forms/vulnerability/wordpress-wp-subscription-forms-1-2-4-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32693 State: PUBLISHED Published: 2025-04-09T16:09:08.148Z Last Updated: 2025-04-09T18:10:40.072Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: WPWebinarSystem Products: WebinarPress Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WPWebinarSystem WebinarPress allows Phishing. This issue affects WebinarPress: from n/a through 1.33.27. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-webinarsystem/vulnerability/wordpress-webinarpress-1-33-27-open-redirection-vulnerability?_s_id=cve