Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-31785 State: PUBLISHED Published: 2025-04-01T14:51:27.267Z Last Updated: 2025-04-01T19:11:55.854Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Clearbit Products: Clearbit Reveal Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Clearbit Clearbit Reveal allows Cross Site Request Forgery. This issue affects Clearbit Reveal: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/clearbit/vulnerability/wordpress-clearbit-reveal-plugin-1-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31786 State: PUBLISHED Published: 2025-04-01T14:51:27.774Z Last Updated: 2025-04-01T18:41:51.312Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Travis Products: Simple Icons Problem Types: CWE-862 Description: Missing Authorization vulnerability in Travis Simple Icons allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple Icons: from n/a through 2.8.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-icons/vulnerability/wordpress-simple-icons-plugin-2-8-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31787 State: PUBLISHED Published: 2025-04-01T14:51:28.460Z Last Updated: 2025-04-01T18:37:28.033Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Brady Vercher Products: Cue Problem Types: CWE-862 Description: Missing Authorization vulnerability in Brady Vercher Cue allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Cue: from n/a through 2.4.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cue/vulnerability/wordpress-cue-by-audiotheme-com-plugin-2-4-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31788 State: PUBLISHED Published: 2025-04-01T14:51:29.126Z Last Updated: 2025-04-01T18:36:54.815Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: smackcoders Products: AIO Performance Profiler, Monitor, Optimize, Compress & Debug Problem Types: CWE-532 Description: Insertion of Sensitive Information into Log File vulnerability in smackcoders AIO Performance Profiler, Monitor, Optimize, Compress & Debug allows Retrieve Embedded Sensitive Data. This issue affects AIO Performance Profiler, Monitor, Optimize, Compress & Debug: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/w
from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/all-in-one-performance-accelerator/vulnerability/wordpress-aio-performance-profiler-monitor-optimize-compress-debug-plugin-1-2-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-31789 State: PUBLISHED Published: 2025-04-03T13:27:13.733Z Last Updated: 2025-05-13T03:39:55.466Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Matat Technologies Products: TextMe SMS Problem Types: CWE-862 Description: Missing Authorization vulnerability in Matat Technologies TextMe SMS allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TextMe SMS: from n/a through 1.9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/textme-sms-integration/vulnerability/wordpress-textme-sms-plugin-1-9-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31790 State: PUBLISHED Published: 2025-04-01T14:51:29.670Z Last Updated: 2025-04-01T18:36:30.121Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Binsaifullah Products: Posten Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Binsaifullah Posten allows DOM-Based XSS. This issue affects Posten: from n/a through 0.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/posten-post-blocks/vulnerability/wordpress-posten-plugin-0-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31791 State: PUBLISHED Published: 2025-04-01T14:51:30.237Z Last Updated: 2025-04-01T18:35:32.979Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Oliver Boyers Products: Pin Generator Problem Types: CWE-862 Description: Missing Authorization vulnerability in Oliver Boyers Pin Generator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pin Generator: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pin-generator/vulnerability/wordpress-pin-generator-plugin-2-0-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31792 State: PUBLISHED Published: 2025-04-01T14:51:30.774Z Last Updated: 2025-04-01T19:50:01.453Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: piotnetdotcom Products: Piotnet Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in piotnetdotcom Piotnet Forms allows Stored XSS. This issue affects Piotnet Forms: from n/a through 1.0.30. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/piotnetforms/vulnerability/wordpress-piotnet-forms-plugin-1-0-30-cross-site-scripting-xss-vulnerability?_s_i
ress/plugin/piotnetforms/vulnerability/wordpress-piotnet-forms-plugin-1-0-30-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31793 State: PUBLISHED Published: 2025-04-01T14:51:31.310Z Last Updated: 2025-04-01T19:48:16.215Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: piotnetdotcom Products: Piotnet Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in piotnetdotcom Piotnet Forms allows Stored XSS. This issue affects Piotnet Forms: from n/a through 1.0.30. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/piotnetforms/vulnerability/wordpress-piotnet-forms-plugin-1-0-30-cross-site-scripting-xss-vulnerability-2?_s
ress/plugin/piotnetforms/vulnerability/wordpress-piotnet-forms-plugin-1-0-30-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-31794 State: PUBLISHED Published: 2025-04-03T13:27:13.963Z Last Updated: 2025-04-03T15:05:32.379Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Web Ready Now Products: WR Price List Manager For Woocommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Web Ready Now WR Price List Manager For Woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WR Price List Manager For Woocommerce: from n/a through 1.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wr-price-list-for-woocommerce/vulnerability/w
lnrichment: References: - https://patchstack.com/database/wordpress/plugin/wr-price-list-for-woocommerce/vulnerability/wordpress-wr-price-list-manager-for-woocommerce-plugin-1-0-8-arbitrary-content-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-31795 State: PUBLISHED Published: 2025-04-03T13:27:14.134Z Last Updated: 2025-04-03T19:08:01.276Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Plugin Devs Products: Shopify to WooCommerce Migration Problem Types: CWE-862 Description: Missing Authorization vulnerability in Plugin Devs Shopify to WooCommerce Migration allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Shopify to WooCommerce Migration: from n/a through 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/migrate-shopify-to-woocommerce/vulnerability/wordpress-shopify-t
ces: - https://patchstack.com/database/wordpress/plugin/migrate-shopify-to-woocommerce/vulnerability/wordpress-shopify-to-woocommerce-migration-plugin-1-3-0-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-31796 State: PUBLISHED Published: 2025-04-01T14:51:31.846Z Last Updated: 2025-04-01T19:28:27.512Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: TheInnovs Team Products: ElementsCSS Addons for Elementor Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in TheInnovs Team ElementsCSS Addons for Elementor allows Server Side Request Forgery. This issue affects ElementsCSS Addons for Elementor: from n/a through 1.0.8.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/css-for-elementor/vulnerability/wordpress-elementscss-addons-for-elementor-plugi
atchstack.com/database/wordpress/plugin/css-for-elementor/vulnerability/wordpress-elementscss-addons-for-elementor-plugin-1-0-8-7-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31797 State: PUBLISHED Published: 2025-04-01T14:51:32.434Z Last Updated: 2025-04-01T20:20:40.332Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: BoldGrid Products: Sprout Clients Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldGrid Sprout Clients allows Stored XSS. This issue affects Sprout Clients: from n/a through 3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sprout-clients/vulnerability/wordpress-sprout-clients-plugin-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31798 State: PUBLISHED Published: 2025-04-01T14:51:33.336Z Last Updated: 2025-04-02T15:18:08.776Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: publitio Products: Publitio Problem Types: CWE-862 Description: Missing Authorization vulnerability in publitio Publitio allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Publitio: from n/a through 2.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/publitio/vulnerability/wordpress-publitio-plugin-2-1-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31799 State: PUBLISHED Published: 2025-04-01T14:51:33.933Z Last Updated: 2025-04-02T15:17:10.982Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: publitio Products: Publitio Problem Types: CWE-862 Description: Missing Authorization vulnerability in publitio Publitio allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Publitio: from n/a through 2.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/publitio/vulnerability/wordpress-publitio-plugin-2-1-8-broken-access-control-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-31800 State: PUBLISHED Published: 2025-04-03T13:27:14.301Z Last Updated: 2025-04-03T19:05:43.388Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: publitio Products: Publitio Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in publitio Publitio allows Path Traversal. This issue affects Publitio: from n/a through 2.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/publitio/vulnerability/wordpress-publitio-plugin-2-1-8-arbitrary-file-read-vulnerability?_s_id=cve
CVE ID: CVE-2025-31801 State: PUBLISHED Published: 2025-04-01T14:51:34.501Z Last Updated: 2025-04-02T15:14:21.982Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Maksym Marko Products: MX Time Zone Clocks Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maksym Marko MX Time Zone Clocks allows Reflected XSS. This issue affects MX Time Zone Clocks: from n/a through 5.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mx-time-zone-clocks/vulnerability/wordpress-mx-time-zone-clocks-plugin-5-1-1-cross-site-sc
com/database/wordpress/plugin/mx-time-zone-clocks/vulnerability/wordpress-mx-time-zone-clocks-plugin-5-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31802 State: PUBLISHED Published: 2025-04-01T14:51:35.057Z Last Updated: 2025-04-01T17:43:09.176Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Shiptimize Products: Shiptimize for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Shiptimize Shiptimize for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Shiptimize for WooCommerce: from n/a through 3.1.86. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/shiptimize-for-woocommerce/vulnerability/wordpress-shiptimize-for-woocommerce-plugi
hstack.com/database/wordpress/plugin/shiptimize-for-woocommerce/vulnerability/wordpress-shiptimize-for-woocommerce-plugin-3-1-86-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-31803 State: PUBLISHED Published: 2025-04-01T14:51:35.752Z Last Updated: 2025-04-01T20:04:43.108Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Neteuro Products: Turisbook Booking System Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Neteuro Turisbook Booking System allows Stored XSS. This issue affects Turisbook Booking System: from n/a through 1.3.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/turisbook-booking-system/vulnerability/wordpress-turisbook-booking-system-plugin-1-3-7-s
k.com/database/wordpress/plugin/turisbook-booking-system/vulnerability/wordpress-turisbook-booking-system-plugin-1-3-7-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31804 State: PUBLISHED Published: 2025-04-01T14:51:36.333Z Last Updated: 2025-04-01T20:04:23.324Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: DraftPress Team Products: Follow Us Badges Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DraftPress Team Follow Us Badges allows Stored XSS. This issue affects Follow Us Badges: from n/a through 3.1.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpsite-follow-us-badges/vulnerability/wordpress-follow-us-badges-plugin-3-1-11-cross-site-scrip
atabase/wordpress/plugin/wpsite-follow-us-badges/vulnerability/wordpress-follow-us-badges-plugin-3-1-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31805 State: PUBLISHED Published: 2025-04-01T14:51:36.930Z Last Updated: 2025-04-01T18:33:24.846Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: ExpressTech Systems Products: Gutena Kit – Gutenberg Blocks and Templates Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Systems Gutena Kit – Gutenberg Blocks and Templates allows Stored XSS. This issue affects Gutena Kit – Gutenberg Blocks and Templates: from n/a through 2.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gutena-
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gutena-kit/vulnerability/wordpress-gutena-kit-plugin-2-0-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31806 State: PUBLISHED Published: 2025-04-01T14:51:37.549Z Last Updated: 2025-04-01T18:32:32.507Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: uSystems Products: Webling Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uSystems Webling allows Stored XSS. This issue affects Webling: from n/a through 3.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/webling/vulnerability/wordpress-webling-plugin-3-9-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31807 State: PUBLISHED Published: 2025-04-01T14:51:38.153Z Last Updated: 2025-04-01T18:30:06.239Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: CloudRedux Products: Product Notices for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CloudRedux Product Notices for WooCommerce allows Cross Site Request Forgery. This issue affects Product Notices for WooCommerce: from n/a through 1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/product-notices-for-woocommerce/vulnerability/wordpress-product-notices-for-woocommerce-plugin-
atabase/wordpress/plugin/product-notices-for-woocommerce/vulnerability/wordpress-product-notices-for-woocommerce-plugin-1-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31808 State: PUBLISHED Published: 2025-04-01T14:51:38.730Z Last Updated: 2025-04-01T18:29:31.431Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: IT Path Solutions Products: SCSS WP Editor Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in IT Path Solutions SCSS WP Editor allows Cross Site Request Forgery. This issue affects SCSS WP Editor: from n/a through 1.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/scss-wp-editor/vulnerability/wordpress-scss-wp-editor-plugin-1-1-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31809 State: PUBLISHED Published: 2025-04-01T14:51:39.281Z Last Updated: 2025-04-01T18:29:10.798Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Labinator Products: Labinator Content Types Duplicator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Labinator Labinator Content Types Duplicator allows Cross Site Request Forgery. This issue affects Labinator Content Types Duplicator: from n/a through 1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/labinator-content-types-duplicator/vulnerability/wordpress-labinator-content-types-dupli
k.com/database/wordpress/plugin/labinator-content-types-duplicator/vulnerability/wordpress-labinator-content-types-duplicator-plugin-1-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31810 State: PUBLISHED Published: 2025-04-01T14:51:39.860Z Last Updated: 2025-04-01T18:27:02.605Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: PickPlugins Products: Question Answer Problem Types: CWE-862 Description: Missing Authorization vulnerability in PickPlugins Question Answer allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Question Answer: from n/a through 1.2.70. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/question-answer/vulnerability/wordpress-question-answer-plugin-1-2-70-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31811 State: PUBLISHED Published: 2025-04-01T14:51:40.437Z Last Updated: 2025-04-01T18:25:55.702Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: xtreeme Products: Planyo online reservation system Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xtreeme Planyo online reservation system allows Stored XSS. This issue affects Planyo online reservation system: from n/a through 3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/planyo-online-reservation-system/vulnerability/wordpress-planyo-on
s: - https://patchstack.com/database/wordpress/plugin/planyo-online-reservation-system/vulnerability/wordpress-planyo-online-reservation-system-plugin-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31812 State: PUBLISHED Published: 2025-04-01T14:51:41.048Z Last Updated: 2025-04-01T18:19:53.792Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Tomas Products: BuddyPress Members Only Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomas BuddyPress Members Only allows Stored XSS. This issue affects BuddyPress Members Only: from n/a through 3.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/buddypress-members-only/vulnerability/wordpress-buddypress-members-only-plugin-3-5-3-cross-site
atabase/wordpress/plugin/buddypress-members-only/vulnerability/wordpress-buddypress-members-only-plugin-3-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31813 State: PUBLISHED Published: 2025-04-01T14:51:41.800Z Last Updated: 2025-04-01T18:19:35.822Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Website366.com Products: WPSHARE247 Elementor Addons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Website366.com WPSHARE247 Elementor Addons allows Stored XSS. This issue affects WPSHARE247 Elementor Addons: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpshare247-elementor-addons/vulnerability/wordpress-wpshare247-elem
: - https://patchstack.com/database/wordpress/plugin/wpshare247-elementor-addons/vulnerability/wordpress-wpshare247-elementor-addons-plugin-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31814 State: PUBLISHED Published: 2025-04-01T14:51:42.462Z Last Updated: 2025-04-01T18:15:07.554Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: OwnerRez Products: OwnerRez Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in OwnerRez OwnerRez allows Cross Site Request Forgery. This issue affects OwnerRez: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ownerrez/vulnerability/wordpress-ownerrez-plugin-1-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31815 State: PUBLISHED Published: 2025-04-01T14:51:43.013Z Last Updated: 2025-04-01T20:03:59.679Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: devscred Products: Design Blocks Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devscred Design Blocks allows Stored XSS. This issue affects Design Blocks: from n/a through 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/exclusive-blocks/vulnerability/wordpress-design-blocks-plugin-1-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve