Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ta/RHSA-2025:19714 - https://access.redhat.com/errata/RHSA-2025:19720 - https://access.redhat.com/errata/RHSA-2025:20959 - https://access.redhat.com/errata/RHSA-2025:21032 - https://access.redhat.com/errata/RHSA-2025:21655 - https://access.redhat.com/errata/RHSA-2025:21656 - https://access.redhat.com/errata/RHSA-2025:21657 - https://access.redhat.com/errata/RHSA-2025:21664 - https://access.redhat.com/errata/RHSA-2025:21665 - https://access.redhat.com/errata/RHSA-2025:21666 - https://access.redhat.com/errata/RHSA-2025:21772 - https://access.redhat.com/errata/RHSA-2025:22013 - https://access.redhat.com/security/cve/CVE-2025-4945 - https://bugzilla.redhat.com/show_bug.cgi?id=2367175
CVE ID: CVE-2025-4946 State: PUBLISHED Published: 2025-07-02T09:23:23.696Z Last Updated: 2025-07-02T13:14:28.922Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Odin_Design Products: Vikinger Problem Types: CWE-22 Description: The Vikinger theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the vikinger_delete_activity_media_ajax() function in all versions up to, and including, 1.9.32. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-co
itrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Note: Requires Vikinger Media plugin to be installed and active. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/22d8f1db-1b7e-4b68-a381-01f51dd34b2b?source=cve - https://themeforest.net/item/vikinger-buddypress-and-gamipress-social-community/28612259
CVE ID: CVE-2025-4947 State: PUBLISHED Published: 2025-05-28T06:29:34.974Z Last Updated: 2025-05-28T13:58:33.430Z Vendors: curl Products: curl Problem Types: CWE-295 Improper Certificate Validation Description: libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://curl.se/docs/CVE-2025-4947.json - https://curl.se/docs/CVE-2025-4947.html - https://hackerone.com/reports/3150884
CVE ID: CVE-2025-4948 State: PUBLISHED Published: 2025-05-19T15:55:46.230Z Last Updated: 2025-11-18T08:34:19.758Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support
ce, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-191 Description: A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal calculation
rs when the library processes specially crafted multipart messages. Due to improper validation, an internal calculation can go wrong, leading to an integer underflow. This can cause the program to access invalid memory and crash. As a result, any application or server using libsoup could be forced to exit unexpectedly, creating a denial-of-service (DoS) risk. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:21657 - https://access.redhat.com/errata/RHSA-2025:8126 - https://access.redhat.com/errata/RHSA-2025:8128 - https://access.redhat.com/errata/RHSA-2025:8132 - https://access.redhat.com/errata/RHSA-2025:8139 - https://access.redhat.
tps://access.redhat.com/errata/RHSA-2025:8132 - https://access.redhat.com/errata/RHSA-2025:8139 - https://access.redhat.com/errata/RHSA-2025:8140 - https://access.redhat.com/errata/RHSA-2025:8252 - https://access.redhat.com/errata/RHSA-2025:8480 - https://access.redhat.com/errata/RHSA-2025:8481 - https://access.redhat.com/errata/RHSA-2025:8482 - https://access.redhat.com/errata/RHSA-2025:8663 - https://access.redhat.com/errata/RHSA-2025:9179 - https://access.redhat.com/security/cve/CVE-2025-4948 - https://bugzilla.redhat.com/show_bug.cgi?id=2367183 - https://gitlab.gnome.org/GNOME/libsoup/-/issues/449
CVE ID: CVE-2025-4949 State: PUBLISHED Published: 2025-05-21T06:47:19.777Z Last Updated: 2025-10-14T06:30:04.660Z Vendors: Eclipse JGit Products: Eclipse JGit Problem Types: CWE-611, CWE-827 Description: In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This vulnerability can lead to information disclosure, denial of service, and other security issues. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
closure, denial of service, and other security issues. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://projects.eclipse.org/projects/technology.jgit/releases/7.2.1 - https://projects.eclipse.org/projects/technology.jgit/releases/7.1.1 - https://projects.eclipse.org/projects/technology.jgit/releases/7.0.1 - https://projects.eclipse.org/projects/technology.jgit/releases/6.10.1 - https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/281 - https://gitlab.eclipse.org/security/cve-assignement/-/issues/64 - https://projects.eclipse.org/projects/technology.jgit/releases/5.13.4
CVE ID: CVE-2025-4950 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:40.226Z Description: No description available.
CVE ID: CVE-2025-4951 State: PUBLISHED Published: 2025-05-20T08:39:38.370Z Last Updated: 2025-05-20T13:36:46.854Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Rapid7 Products: AppSpider Pro Problem Types: CWE-79 Description: Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in the "ScanName" field. Despite the application preventing the inclusion of special characters within the "ScanName" field, this could be bypassed by modifying the configuration file directly. This is fixed as of version 7.5.018 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.rapid7.com/re
fixed as of version 7.5.018 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.rapid7.com/release-notes/appspider/20250516/
CVE ID: CVE-2025-4952 State: PUBLISHED Published: 2025-10-31T12:28:15.267Z Last Updated: 2025-10-31T14:18:16.911Z Vendors: ESET Products: ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Security Ultimate, ESET Small Business Security, ESET Safe Server, ESET Endpoint Antivirus, ESET Endpoint Security for Windows, ESET Server Security for Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, ESET Security for Microsoft SharePoint Server, ESET File Security for Microsoft Azure Problem Types: CWE-732 Description: Tampering of the registry entries might have led to preventing the ESET security products from starting co
Description: Tampering of the registry entries might have led to preventing the ESET security products from starting correctly on the next system startup or to unauthorized changes in the product's configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.eset.com/en/ca8853-eset-customer-advisory-denial-of-service-vulnerability-in-eset-security-products-for-windows-fixed
CVE ID: CVE-2025-4953 State: PUBLISHED Published: 2025-09-16T14:54:50.045Z Last Updated: 2025-11-21T06:19:18.800Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 8, Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.18, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-378 Description: A flaw was found in Podman. In a Containerfile or Podman, data written to RUN --mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the contai
-mount=type=bind mounts during the podman build is not discarded. This issue can lead to files created within the container appearing in the temporary build context directory on the host, leaving the created files accessible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:15904 - https://access.redhat.com/errata/RHSA-2025:16724 - https://access.redhat.com/errata/RHSA-2025:16729 - https://access.redhat.com/errata/RHSA-2025:17669 - https://access.redhat.com/security/cve/CVE-2025-4953 - https://bugzilla.redhat.com/show_bug.cgi?id=2367235 - https://github.com/containers/podman/pull/25173
CVE ID: CVE-2025-4954 State: PUBLISHED Published: 2025-06-10T06:00:11.865Z Last Updated: 2025-06-11T13:30:26.508Z Vendors: Unknown Products: Axle Demo Importer Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The Axle Demo Importer WordPress plugin through 1.0.3 does not validate files to be uploaded, which could allow authenticated users (author and above) to upload arbitrary files such as PHP on the server Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/673f35ff-e1d5-4099-86e7-8b6e3e410ef8/
CVE ID: CVE-2025-4955 State: PUBLISHED Published: 2025-06-18T06:00:02.019Z Last Updated: 2025-06-18T18:35:58.051Z Vendors: Unknown Products: tarteaucitron.io Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The tarteaucitron.io WordPress plugin before 1.9.5 uses query parameters from YouTube oEmbed URLs without sanitizing these parameters correctly, which could allow users with the contributor role and above to perform Stored Cross-site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/b84a73a4-7e9b-4994-a9bb-ad47f7cf45da/
CVE ID: CVE-2025-4956 State: PUBLISHED Published: 2025-08-30T01:49:20.408Z Last Updated: 2025-09-02T17:26:47.746Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: AA-Team Products: Pro Bulk Watermark Plugin for WordPress Problem Types: CWE-35 Description: Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/pro-watermark/vulnerability/wordpress-pro-bulk-watermark-plugin-for-wordpress-theme-2-0-path-traversa
se/wordpress/theme/pro-watermark/vulnerability/wordpress-pro-bulk-watermark-plugin-for-wordpress-theme-2-0-path-traversal-vulnerability?_s_id=cve
CVE ID: CVE-2025-4957 State: PUBLISHED Published: 2025-09-26T08:31:14.954Z Last Updated: 2025-09-26T13:51:26.731Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Metagauss Products: ProfileGrid Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss ProfileGrid allows Reflected XSS. This issue affects ProfileGrid : from n/a through 5.9.5.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/profilegrid-user-profiles-groups-and-communities/vulnerability/wordpress-profilegrid-plugin-5-9-5-7-reflected-cross-site
profilegrid-user-profiles-groups-and-communities/vulnerability/wordpress-profilegrid-plugin-5-9-5-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-4962 State: PUBLISHED Published: 2025-08-18T13:27:49.397Z Last Updated: 2025-08-18T14:00:49.792Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-284 Description: An Insecure Direct Object Reference (IDOR) vulnerability was identified in the `POST /v1/templates` endpoint of the Lunary API, affecting versions up to 0.8.8. This vulnerability allows authenticated users to create templates in another user's project by altering the `projectId` query parameter. The root cause of this issue is the absence of server-side validation to ensure that the authenticated user owns the specified `projectI
f this issue is the absence of server-side validation to ensure that the authenticated user owns the specified `projectId`. The vulnerability has been addressed in version 1.9.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/137a0aef-e243-49d4-832f-8e56056cba1a - https://github.com/lunary-ai/lunary/commit/e977d06f18a615963ffbe07e5bdff70218c29907
CVE ID: CVE-2025-4963 State: PUBLISHED Published: 2025-05-28T09:22:13.823Z Last Updated: 2025-05-28T13:27:29.848Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpextended Products: The Ultimate WordPress Toolkit – WP Extended Problem Types: CWE-79 Description: The WP Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additiona
s and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/eabdd744-1a72-40f2-b569-f56a1b913273?source=cve - https://wpextended.io/module_resources/svg-file-upload/ - https://wordpress.org/plugins/wpextended/#developers - https://plugins.trac.wordpress.org/changeset/3300818/
CVE ID: CVE-2025-4964 State: PUBLISHED Published: 2025-06-06T06:42:52.386Z Last Updated: 2025-06-06T16:08:57.521Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: hk1993 Products: WP Online Users Stats Problem Types: CWE-89 Description: The WP Online Users Stats plugin for WordPress is vulnerable to time-based SQL Injection via the ‘table_name’ parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Editor-level access and above, to append additional SQL queries into already existing q
or authenticated attackers, with Editor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a7ef66cf-ddf1-42be-82b1-cb6edcbf253c?source=cve - https://wordpress.org/plugins/wp-online-users-stats/#developers - https://plugins.trac.wordpress.org/browser/wp-online-users-stats/trunk/admin/class-wp-online-users-stats-admin.php#L118
CVE ID: CVE-2025-4965 State: PUBLISHED Published: 2025-06-19T06:44:49.185Z Last Updated: 2025-06-20T13:11:39.817Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: WPBakery Page Builder for WordPress Problem Types: CWE-79 Description: The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Grid Builder feature in all versions up to, and including, 8.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will exec
for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a0489172-279c-4397-a937-bca4840a196f?source=cve - https://kb.wpbakery.com/docs/preface/release-notes/
CVE ID: CVE-2025-4966 State: PUBLISHED Published: 2025-06-06T06:42:51.839Z Last Updated: 2025-06-06T16:09:04.913Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: hk1993 Products: WP Online Users Stats Problem Types: CWE-352 Description: The WP Online Users Stats plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing nonce validation within the hk_dataset_results() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additio
forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a41226ab-9732-4de2-843b-284c011c9224?source=cve - https://wordpress.org/plugins/wp-online-users-stats/#developers - https://plugins.trac.wordpress.org/browser/wp-online-users-stats/trunk/admin/class-wp-online-users-stats-admin.php#L118
CVE ID: CVE-2025-4967 State: PUBLISHED Published: 2025-05-29T19:58:47.947Z Last Updated: 2025-05-29T20:17:39.086Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Esri Products: Portal for ArcGIS Problem Types: CWE-918 Description: Esri Portal for ArcGIS 11.4 and prior allows a remote, unauthenticated attacker to bypass the Portal’s SSRF protections. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/portal-for-arcgis-security-2025-update-2-patch
CVE ID: CVE-2025-4968 State: PUBLISHED Published: 2025-07-24T03:39:04.762Z Last Updated: 2025-07-24T13:18:37.467Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpbakery Products: WPBakery Visual Composer Problem Types: CWE-79 Description: The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple Page Builder elements (Copyright Element, Hover Box, Separator With Text, FAQ, Single Image, Custom Header, Button, Call To Action, Progress Bar, Pie Chart, Round Chart, and Line Chart) in all versions up to, and including, 8.4.1 due to insufficient input sanitization and output escaping on user supplied
in all versions up to, and including, 8.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/10945855-675a-4a85-8bb2-84bc40c1b826?source=cve - https://kb.wpbakery.com/docs/preface/release-notes/
CVE ID: CVE-2025-4969 State: PUBLISHED Published: 2025-05-21T01:44:13.820Z Last Updated: 2025-11-20T21:09:44.480Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-125 Description: A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. This can allow a remote attacker to send a specially crafted multipart HTTP body, causing the libsoup-consuming server to read beyond its allocated memory boundari
specially crafted multipart HTTP body, causing the libsoup-consuming server to read beyond its allocated memory boundaries (out-of-bounds read). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-4969 - https://bugzilla.redhat.com/show_bug.cgi?id=2367552
CVE ID: CVE-2025-4971 State: PUBLISHED Published: 2025-05-19T23:42:23.173Z Last Updated: 2025-05-20T14:08:34.329Z Vendors: Broadcom Products: Automic Automation Problem Types: CWE-426 Description: Broadcom Automic Automation Agent Unix versions < 24.3.0 HF4 and < 21.0.13 HF1 allow low privileged users who have execution rights on the agent executable to escalate their privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25732 - https://www.secuvera.de/advisories/secuvera-SA-2025-01.txt
CVE ID: CVE-2025-4972 State: PUBLISHED Published: 2025-07-10T08:30:59.709Z Last Updated: 2025-07-10T20:11:10.748Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that could have allowed authenticated users with invitation privileges to bypass group-level user invitation restrictions by manipulating group invitation functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/543816 - https://hackerone.com/reports/3148693
CVE ID: CVE-2025-4973 State: PUBLISHED Published: 2025-06-12T05:23:39.978Z Last Updated: 2025-06-12T13:07:20.510Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: AmentoTech Products: Workreap Problem Types: CWE-288 Description: The Workreap plugin for WordPress, used by the Workreap - Freelance Marketplace WordPress Theme, is vulnerable to authentication bypass in all versions up to, and including, 3.3.1. This is due to the plugin not properly verifying a user's identity prior to logging them in when verifying an account with an email address. This makes it possible for unauthenticated attackers to log in as registered users, including administrators, if t
ress. This makes it possible for unauthenticated attackers to log in as registered users, including administrators, if they know user's email address. This is only exploitable fi the user's confirmation_key has not already been set by the plugin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8e7693a3-642a-4eff-902c-d29a3c12deb0?source=cve - https://themeforest.net/item/workreap-freelance-marketplace-wordpress-theme/23712454#item-description__release-3-3-2-23-may-2025
CVE ID: CVE-2025-4974 State: REJECTED Published: N/A Last Updated: 2025-09-11T22:19:40.202Z Description: No description available.