Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-47653 State: PUBLISHED Published: 2025-05-07T14:20:44.904Z Last Updated: 2025-05-07T20:39:34.592Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: tggfref Products: WP-Recall Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in tggfref WP-Recall allows PHP Local File Inclusion. This issue affects WP-Recall: from n/a through 16.26.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-recall/vulnerability/wordpress-wp-recall-16-26-14-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-47654 State: PUBLISHED Published: 2025-06-27T11:52:33.236Z Last Updated: 2025-06-27T13:59:18.142Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Adrian Tobey Products: FormLift for Infusionsoft Web Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Reflected XSS. This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.20. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/formlift/vulnerability/wordpress-formlift-f
Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/formlift/vulnerability/wordpress-formlift-for-infusionsoft-web-forms-plugin-7-5-19-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47655 State: PUBLISHED Published: 2025-05-07T14:20:45.442Z Last Updated: 2025-05-07T20:29:26.861Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: themarketer2023 Products: theMarketer Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in themarketer2023 theMarketer allows Stored XSS. This issue affects theMarketer: from n/a through 1.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/themarketer/vulnerability/wordpress-themarketer-plugin-1-4-7-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47656 State: PUBLISHED Published: 2025-05-07T14:20:45.991Z Last Updated: 2025-05-07T20:27:59.052Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: spiraclethemes Products: Spiraclethemes Site Library Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spiraclethemes Spiraclethemes Site Library allows Stored XSS. This issue affects Spiraclethemes Site Library: from n/a through 1.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/spiraclethemes-site-library/vulnerability/wordpress-spiracletheme
es: - https://patchstack.com/database/wordpress/plugin/spiraclethemes-site-library/vulnerability/wordpress-spiraclethemes-site-library-1-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47657 State: PUBLISHED Published: 2025-05-07T14:20:46.516Z Last Updated: 2025-05-07T18:10:57.159Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Productive Minds Products: Productive Commerce Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Productive Minds Productive Commerce allows SQL Injection. This issue affects Productive Commerce: from n/a through 1.1.22. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/productive-commerce/vulnerability/wordpress-productive-commerce-1-1-22-sql-inje
patchstack.com/database/wordpress/plugin/productive-commerce/vulnerability/wordpress-productive-commerce-1-1-22-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-47658 State: PUBLISHED Published: 2025-05-23T12:43:23.046Z Last Updated: 2025-05-23T18:59:06.107Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: ELEXtensions Products: ELEX WordPress HelpDesk & Customer Ticketing System Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System allows Upload a Web Shell to a Web Server. This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a through 3.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/elex-he
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/elex-helpdesk-customer-support-ticket-system/vulnerability/wordpress-elex-wordpress-helpdesk-customer-ticketing-system-3-2-7-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-47659 State: PUBLISHED Published: 2025-05-07T14:20:47.065Z Last Updated: 2025-05-07T18:10:45.699Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: voidcoders Products: WPBakery Visual Composer WHMCS Elements Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in voidcoders WPBakery Visual Composer WHMCS Elements allows Stored XSS. This issue affects WPBakery Visual Composer WHMCS Elements: from n/a through 1.0.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/void-visual-whmcs-element/vulnerabi
ISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/void-visual-whmcs-element/vulnerability/wordpress-wpbakery-visual-composer-whmcs-elements-1-0-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47660 State: PUBLISHED Published: 2025-05-23T12:43:22.575Z Last Updated: 2025-05-27T14:14:11.844Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Codexpert, Inc Products: WC Affiliate Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Codexpert, Inc WC Affiliate allows Object Injection. This issue affects WC Affiliate: from n/a through 2.9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wc-affiliate/vulnerability/wordpress-wc-affiliate-2-8-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-47661 State: PUBLISHED Published: 2025-05-07T14:20:47.648Z Last Updated: 2025-05-07T18:10:34.310Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: codemstory Products: 워드프레스 결제 심플페이 Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in codemstory 워드프레스 결제 심플페이 allows Cross Site Request Forgery. This issue affects 워드프레스 결제 심플페이: from n/a through 5.2.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pgall-for-woocommerce/vulnerability/wordpress-5-2-11-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-47662 State: PUBLISHED Published: 2025-05-07T14:20:48.201Z Last Updated: 2025-05-07T18:10:23.151Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: woobox Products: Woobox Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woobox Woobox allows Stored XSS. This issue affects Woobox: from n/a through 1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woobox/vulnerability/wordpress-woobox-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47663 State: PUBLISHED Published: 2025-05-23T12:43:22.108Z Last Updated: 2025-05-27T14:19:55.738Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: mojoomla Products: Hospital Management System Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla Hospital Management System allows Upload a Web Shell to a Web Server. This issue affects Hospital Management System: from 47.0(20 through 11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hospital-management/vulnerability/wordpress-hospital-management-system-plugin-47-0-20-11-
.com/database/wordpress/plugin/hospital-management/vulnerability/wordpress-hospital-management-system-plugin-47-0-20-11-2023-arbitrary-file-upload-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-47664 State: PUBLISHED Published: 2025-05-07T14:20:48.744Z Last Updated: 2025-05-07T18:10:12.692Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: ThimPress Products: WP Pipes Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in ThimPress WP Pipes allows Server Side Request Forgery. This issue affects WP Pipes: from n/a through 1.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-pipes/vulnerability/wordpress-wp-pipes-1-4-2-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-47665 State: PUBLISHED Published: 2025-05-07T14:20:49.279Z Last Updated: 2025-05-07T18:10:01.569Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: bistromatic Products: N360 | Splash Screen Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bistromatic N360 | Splash Screen allows Stored XSS. This issue affects N360 | Splash Screen: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/n360-splash-screen/vulnerability/wordpress-n360-splash-screen-1-0-6-cross-site-scripting-xss
m/database/wordpress/plugin/n360-splash-screen/vulnerability/wordpress-n360-splash-screen-1-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47667 State: PUBLISHED Published: 2025-05-07T14:20:49.821Z Last Updated: 2025-05-07T18:09:50.876Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: qusupport Products: LiveAgent Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in qusupport LiveAgent allows Cross Site Request Forgery. This issue affects LiveAgent: from n/a through 4.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/liveagent/vulnerability/wordpress-liveagent-4-4-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-47668 State: PUBLISHED Published: 2025-05-07T14:20:50.350Z Last Updated: 2025-05-07T18:09:40.670Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: cookiecode Products: CookieCode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cookiecode CookieCode allows Stored XSS. This issue affects CookieCode: from n/a through 2.4.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cookiecode/vulnerability/wordpress-cookiecode-2-4-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47669 State: PUBLISHED Published: 2025-05-07T14:20:50.913Z Last Updated: 2025-05-07T18:09:28.471Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Sabuj Kundu Products: CBX Map for Google Map & OpenStreetMap Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sabuj Kundu CBX Map for Google Map & OpenStreetMap allows DOM-Based XSS. This issue affects CBX Map for Google Map & OpenStreetMap: from n/a through 1.1.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cbxgooglemap/vulnerability/wordpre
CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cbxgooglemap/vulnerability/wordpress-cbx-map-for-google-map-openstreetmap-1-1-12-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47670 State: PUBLISHED Published: 2025-05-23T12:43:21.642Z Last Updated: 2025-05-27T14:22:32.364Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: miniOrange Products: WordPress Social Login and Register Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange WordPress Social Login and Register allows PHP Local File Inclusion. This issue affects WordPress Social Login and Register: from n/a through 7.6.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/miniorange-login-
Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/miniorange-login-openid/vulnerability/wordpress-wordpress-social-login-and-register-7-6-9-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-47671 State: PUBLISHED Published: 2025-05-23T12:43:21.167Z Last Updated: 2025-05-23T16:44:08.118Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: LETSCMS MLM Software Products: Binary MLM Plan Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LETSCMS MLM Software Binary MLM Plan allows SQL Injection. This issue affects Binary MLM Plan: from n/a through 3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/binary-mlm-plan/vulnerability/wordpress-binary-mlm-plan-3-0-sql-injection-vulnerability?_s
com/database/wordpress/plugin/binary-mlm-plan/vulnerability/wordpress-binary-mlm-plan-3-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-47672 State: PUBLISHED Published: 2025-05-23T12:43:20.654Z Last Updated: 2025-05-23T16:54:57.010Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: miniOrange Products: miniOrange Discord Integration Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange miniOrange Discord Integration allows PHP Local File Inclusion. This issue affects miniOrange Discord Integration: from n/a through 2.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/miniorange-discord-integration/vu
CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/miniorange-discord-integration/vulnerability/wordpress-miniorange-discord-integration-2-2-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-47673 State: PUBLISHED Published: 2025-05-23T12:43:20.166Z Last Updated: 2025-05-23T17:10:56.949Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: tychesoftwares Products: Arconix Shortcodes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes allows Reflected XSS. This issue affects Arconix Shortcodes: from n/a through 2.1.16. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/arconix-shortcodes/vulnerability/wordpress-arconix-shortcodes-plugin-2-1-16-reflected-cros
com/database/wordpress/plugin/arconix-shortcodes/vulnerability/wordpress-arconix-shortcodes-plugin-2-1-16-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47674 State: PUBLISHED Published: 2025-05-07T14:20:51.441Z Last Updated: 2025-05-07T18:09:16.882Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Credova Financial Products: Credova_Financial Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Credova Financial Credova_Financial allows Cross Site Request Forgery. This issue affects Credova_Financial: from n/a through 2.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/credova-financial/vulnerability/wordpress-credova-financial-2-5-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-47675 State: PUBLISHED Published: 2025-05-07T14:20:51.957Z Last Updated: 2025-05-07T18:09:05.639Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: woobox Products: Woobox Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woobox Woobox allows DOM-Based XSS. This issue affects Woobox: from n/a through 1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woobox/vulnerability/wordpress-woobox-1-6-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-47676 State: PUBLISHED Published: 2025-05-07T14:20:52.511Z Last Updated: 2025-05-07T18:08:55.359Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Faiyaz Alam Products: User Login History Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Faiyaz Alam User Login History allows Stored XSS. This issue affects User Login History: from n/a through 2.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/user-login-history/vulnerability/wordpress-user-login-history-2-1-6-cross-site-scripting-xss-vulne
base/wordpress/plugin/user-login-history/vulnerability/wordpress-user-login-history-2-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47677 State: PUBLISHED Published: 2025-05-07T14:20:53.076Z Last Updated: 2025-05-07T18:08:43.937Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: gt3themes Products: Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gt3themes Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery allows Stored XSS. This issue affects Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery: from n/a through 2.7.7.25. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/da
y: from n/a through 2.7.7.25. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gt3-photo-video-gallery/vulnerability/wordpress-photo-gallery-gt3-image-gallery-gutenberg-block-gallery-2-7-7-25-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47678 State: PUBLISHED Published: 2025-05-23T12:43:19.709Z Last Updated: 2025-05-23T17:22:59.314Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: FunnelCockpit Products: FunnelCockpit Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelCockpit FunnelCockpit allows Reflected XSS. This issue affects FunnelCockpit: from n/a through 1.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/funnelcockpit/vulnerability/wordpress-funnelcockpit-plugin-1-4-2-reflected-cross-site-scripting-xss-vulnerab
ress/plugin/funnelcockpit/vulnerability/wordpress-funnelcockpit-plugin-1-4-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47679 State: PUBLISHED Published: 2025-05-07T14:20:53.598Z Last Updated: 2025-05-07T18:08:33.517Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: RS WP THEMES Products: RS WP Book Showcase Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RS WP THEMES RS WP Book Showcase allows DOM-Based XSS. This issue affects RS WP Book Showcase: from n/a through 6.7.40. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rs-wp-books-showcase/vulnerability/wordpress-rs-wp-book-showcase-6-7-40-cross-site-script
.com/database/wordpress/plugin/rs-wp-books-showcase/vulnerability/wordpress-rs-wp-book-showcase-6-7-40-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47680 State: PUBLISHED Published: 2025-05-23T12:43:19.228Z Last Updated: 2025-05-27T14:22:45.391Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Michel - xiligroup dev Products: xili-tidy-tags Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michel - xiligroup dev xili-tidy-tags allows Reflected XSS. This issue affects xili-tidy-tags: from n/a through 1.12.06. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/xili-tidy-tags/vulnerability/wordpress-xili-tidy-tags-plugin-1-12-06-reflected-cross-
tack.com/database/wordpress/plugin/xili-tidy-tags/vulnerability/wordpress-xili-tidy-tags-plugin-1-12-06-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47681 State: PUBLISHED Published: 2025-05-07T14:20:54.122Z Last Updated: 2025-05-07T18:08:23.223Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Ability, Inc Products: Web Accessibility with Max Access Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ability, Inc Web Accessibility with Max Access allows Cross Site Request Forgery. This issue affects Web Accessibility with Max Access: from n/a through 2.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/accessibility-toolbar/vulnerability/wordpress-web-accessibility-with-max-access-2-0-9
tack.com/database/wordpress/plugin/accessibility-toolbar/vulnerability/wordpress-web-accessibility-with-max-access-2-0-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-47682 State: PUBLISHED Published: 2025-05-12T18:19:43.926Z Last Updated: 2025-05-12T18:31:11.796Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Cozy Vision Technologies Pvt. Ltd. Products: SMS Alert Order Notifications – WooCommerce Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications – WooCommerce allows SQL Injection.This issue affects SMS Alert Order Notifications – WooCommerce: from n/a through 3.8.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com
ommerce: from n/a through 3.8.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sms-alert/vulnerability/wordpress-sms-alert-order-notifications-woocommerce-3-8-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-47683 State: PUBLISHED Published: 2025-05-07T14:20:54.652Z Last Updated: 2025-05-07T18:08:11.722Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Florent Maillefaud Products: WP Maintenance Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Florent Maillefaud WP Maintenance allows Object Injection. This issue affects WP Maintenance: from n/a through 6.1.9.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-maintenance/vulnerability/wordpress-wp-maintenance-6-1-9-7-php-object-injection-vulnerability?_s_id=cve