Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-3845 State: PUBLISHED Published: 2025-04-21T22:00:11.230Z Last Updated: 2025-04-22T02:16:16.536Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: markparticle Products: WebServer Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in markparticle WebServer up to 1.0. It has been declared as critical. Affected by this vulnerability is the function Buffer::HasWritten of the file code/buffer/buffer.cpp. The manipulation of the argument writePos_ leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305773 - https://vuldb.com/?ctiid.305773 - https://vuldb.com/?submit.556273 - https://magnificent-dill-351.notion.site/Arbitrary-Memory-Writing-in-WebServer-1-0-1d1c693918ed80889711ebd44f7f9a31
CVE ID: CVE-2025-3846 State: PUBLISHED Published: 2025-04-21T22:31:05.189Z Last Updated: 2025-04-22T02:15:18.560Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: markparticle Products: WebServer Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in markparticle WebServer up to 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file code/http/httprequest.cpp of the component Registration. The manipulation of the argument username/password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305774 - https://vuldb.com/?ctiid.305774 - https://vuldb.com/?submit.556274 - https://magnificent-dill-351.notion.site/SQL-Injection-of-Register-in-WebServer-1-0-1d1c693918ed80b69a0bfcd9b685de46 - https://magnificent-dill-351.notion.site/SQL-Injection-of-Login-in-WebServer-1-0-1d1c693918ed800b847bcc28bd691b7c
CVE ID: CVE-2025-3847 State: PUBLISHED Published: 2025-04-21T23:00:11.981Z Last Updated: 2025-04-22T02:13:03.716Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: markparticle Products: WebServer Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in markparticle WebServer up to 1.0. This affects an unknown part of the file code/http/httprequest.cpp of the component Login. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305775 - https://vuldb.com/?ctiid.305775 - https://vuldb.com/?submit.556275 - https://magnificent-dill-351.notion.site/SQL-Injection-of-Login-in-WebServer-1-0-1d1c693918ed800b847bcc28bd691b7c
CVE ID: CVE-2025-3848 State: REJECTED Published: 2025-07-02T03:47:25.725Z Last Updated: 2025-07-24T20:13:31.277Z Description: No description available.
CVE ID: CVE-2025-3849 State: PUBLISHED Published: 2025-04-21T23:31:04.814Z Last Updated: 2025-04-22T02:10:06.371Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: YXJ2018 Products: SpringBoot-Vue-OnlineExam Problem Types: CWE-620, CWE-640 Description: A vulnerability classified as problematic was found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This vulnerability affects unknown code of the file /api/studentPWD. The manipulation of the argument studentId leads to unverified password change. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305776 - https://vuldb.com/?ctiid.305776 - https://vuldb.com/?submit.556283 - https://github.com/YXJ2018/SpringBoot-Vue-OnlineExam/issues/74
CVE ID: CVE-2025-3850 State: PUBLISHED Published: 2025-04-22T00:00:12.706Z Last Updated: 2025-04-22T02:06:11.274Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: YXJ2018 Products: SpringBoot-Vue-OnlineExam Problem Types: CWE-287 Description: A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This issue affects some unknown processing of the component API. The manipulation leads to improper authentication. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Additional An
. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305777 - https://vuldb.com/?ctiid.305777 - https://vuldb.com/?submit.556284 - https://github.com/YXJ2018/SpringBoot-Vue-OnlineExam/issues/73 - https://github.com/YXJ2018/SpringBoot-Vue-OnlineExam/issues/75
CVE ID: CVE-2025-3851 State: PUBLISHED Published: 2025-05-07T01:43:07.050Z Last Updated: 2025-05-07T14:03:29.117Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: themesgrove Products: Download Manager and Payment Form WordPress Plugin – WP SmartPay Problem Types: CWE-200 Description: The Download Manager and Payment Form WordPress Plugin – WP SmartPay plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions 1.1.0 to 2.7.13 via the show() function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view other user's data like email address,
sible for authenticated attackers, with Subscriber-level access and above, to view other user's data like email address, name, and notes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3aade1bd-b69d-4134-a4f7-78372a291557?source=cve - https://plugins.trac.wordpress.org/browser/smartpay/tags/2.7.13/app/Http/Controllers/Rest/CustomerController.php#L34
CVE ID: CVE-2025-3852 State: PUBLISHED Published: 2025-05-07T01:43:08.509Z Last Updated: 2025-05-07T14:03:07.017Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: eoxia Products: WPshop 2 – E-Commerce Problem Types: CWE-269 Description: The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 2.0.0 to 2.6.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email & password through the update() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to change arbitrary user's passwords, including admin
r authenticated attackers, with subscriber-level access and above, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/96b8186c-dfe9-4137-b28d-cc09a25aa9ac?source=cve - https://plugins.trac.wordpress.org/browser/wpshop/tags/2.6.0//core/external/eo-framework/modules/wpeo-model/class/user.class.php#L132 - https://plugins.trac.wordpress.org/browser/wpshop/tags/2.6.0/core/external/eo-framework/modules/wpeo-model/class/rest.class.php#L41 - https://plugins.trac.wordpress.org/browser/wpshop/tags/2.6.0//modules/api/a
odules/wpeo-model/class/rest.class.php#L41 - https://plugins.trac.wordpress.org/browser/wpshop/tags/2.6.0//modules/api/action/class-api-action.php#L32
CVE ID: CVE-2025-3853 State: PUBLISHED Published: 2025-05-07T01:43:06.033Z Last Updated: 2025-05-07T14:03:41.938Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: eoxia Products: WPshop 2 – E-Commerce Problem Types: CWE-639 Description: The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions 2.0.0 to 2.6.0 via the callback_generate_api_key() due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create valid API keys on behalf of other users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ww
ate valid API keys on behalf of other users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/136d63c4-c985-413f-8d8b-b57e11d1d230?source=cve - https://plugins.trac.wordpress.org/browser/wpshop/tags/2.6.0/modules/api/action/class-api-action.php#L160
CVE ID: CVE-2025-3854 State: PUBLISHED Published: 2025-04-22T00:31:07.525Z Last Updated: 2025-04-22T02:04:04.462Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: H3C Products: GR-3000AX Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006. Affected is the function EnableIpv6/UpdateWanModeMulti/UpdateIpv6Params/EditWlanMacList/Edit_List_SSID of the file /goform/aspForm of the component HTTP POST Request Handler. The manipulation of the argument param leads to buffer overflow. The attack needs to be initiated within the local network. The exploit has been disclosed to the public a
ffer overflow. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. Other functions might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305778 - https://vuldb.com/?ctiid.305778 - https://vuldb.com/?submit.556614 - https://github.com/CH13hh/tmp_store_cc/blob/main/H3C%20GR-3000AX/1.md - https://zhiliao.h3c.com/theme/details/229784 - https://www.h3c.com/cn/Service/Document_Software/Software_Download/Consume_product/
CVE ID: CVE-2025-3855 State: PUBLISHED Published: 2025-04-22T00:31:09.193Z Last Updated: 2025-04-22T02:01:36.517Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: CodeCanyon Products: RISE Ultimate Project Manager Problem Types: CWE-99 Description: A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php/team_members/save_profile_image/ of the component Profile Picture Handler. The manipulation of the argument profile_image_file leads to improper control of resource identifiers. The attack may be launched remotely. The exploit has been
_image_file leads to improper control of resource identifiers. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305780 - https://vuldb.com/?ctiid.305780 - https://vuldb.com/?submit.556871 - https://github.com/L4zyFox/RISE-Ultimate_Project_Manager_e_CRM
CVE ID: CVE-2025-3856 State: PUBLISHED Published: 2025-04-22T01:00:11.753Z Last Updated: 2025-04-22T02:00:13.852Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: xxyopen Products: Novel-Plus Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been classified as critical. This affects the function searchByPage of the file /book/searchByPage. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA A
The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.305781 - https://vuldb.com/?ctiid.305781 - https://vuldb.com/?submit.557011 - https://github.com/exp3n5ive/Vul/blob/main/novel_plus-sqli/novel_plus-sqli.md
CVE ID: CVE-2025-3857 State: PUBLISHED Published: 2025-04-21T15:13:51.905Z Last Updated: 2025-10-14T18:18:25.003Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Amazon Products: Amazon Ion Dotnet Problem Types: CWE-835, CWE-502 Description: When reading binary Ion data through Amazon.IonDotnet using the RawBinaryReader class, Amazon.IonDotnet does not check the number of bytes read from the underlying stream while deserializing the binary format. If the Ion data is malformed or truncated, this triggers an infinite loop condition that could potentially result in a denial of service. Users should upgrade to Amazon.IonDotnet version 1.3.1 and ensure any forked o
otentially result in a denial of service. Users should upgrade to Amazon.IonDotnet version 1.3.1 and ensure any forked or derivative code is patched to incorporate the new fixes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://aws.amazon.com/security/security-bulletins/AWS-2025-009/ - https://github.com/amazon-ion/ion-dotnet/security/advisories/GHSA-gm2p-wf5c-w3pj - https://github.com/amazon-ion/ion-dotnet/releases/tag/v1.3.1
CVE ID: CVE-2025-3858 State: PUBLISHED Published: 2025-05-02T03:21:21.096Z Last Updated: 2025-05-02T15:58:49.434Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: michelegiorgi Products: Formality Problem Types: CWE-79 Description: The Formality plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ parameter in all versions up to, and including, 1.5.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CI
bitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e25157d3-42ac-4dd6-a736-5623a16e5629?source=cve - https://plugins.trac.wordpress.org/browser/formality/trunk/public/class-formality-form.php#L137 - https://wordpress.org/plugins/formality/#developers - https://plugins.trac.wordpress.org/changeset/3285036/
CVE ID: CVE-2025-3859 State: PUBLISHED Published: 2025-04-30T16:30:18.670Z Last Updated: 2025-05-12T15:49:52.650Z Vendors: Mozilla Products: Focus Problem Types: Firefox Focus elide URL allows address bar spoofing Description: Websites directing users to long URLs that caused eliding to occur in the location view could leverage the truncating behavior to potentially trick users into thinking they were on a different webpage This vulnerability affects Focus < 138. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1951533 - https://www.mozilla.org/security/advisories/mfsa2025-33/
CVE ID: CVE-2025-3860 State: PUBLISHED Published: 2025-05-07T01:43:09.586Z Last Updated: 2025-05-07T14:02:47.734Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: dealertrend Products: CarDealerPress Problem Types: CWE-79 Description: The CarDealerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘saleclass' parameter in all versions up to, and including, 6.7.2504.00 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional A
bove, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b6ad38a3-adb1-4c82-8e8c-f5883ba0f10e?source=cve - https://plugins.trac.wordpress.org/browser/cardealerpress/tags/6.7.2412.00/templates/shortcode/sc_inventory_counter.php#L34 - https://wordpress.org/plugins/cardealerpress/#developers
CVE ID: CVE-2025-3861 State: PUBLISHED Published: 2025-04-25T05:25:07.164Z Last Updated: 2025-04-25T19:00:51.053Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: buildwps Products: Prevent Direct Access – Protect WordPress Files Problem Types: CWE-863 Description: The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access and modification of data| due to a misconfigured capability check on the 'pda_lite_custom_permission_check' function in versions 2.8.6 to 2.8.8.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to access and change the protection status of media
or authenticated attackers, with Contributor-level access and above, to access and change the protection status of media. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2ed83916-3cf7-4fc6-a16f-45b40cedc721?source=cve - https://plugins.trac.wordpress.org/browser/prevent-direct-access/tags/2.8.8.2/includes/pda_lite_api.php#L71 - https://plugins.trac.wordpress.org/changeset/3279923/
CVE ID: CVE-2025-3862 State: PUBLISHED Published: 2025-05-08T11:13:44.624Z Last Updated: 2025-05-08T13:36:41.869Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: contest-gallery Products: Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons Problem Types: CWE-79 Description: Contest Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 26.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above
ization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a1b043a1-7bee-4ef0-86d9-19cf202cfc71?source=cve - https://www.contest-gallery.com/documentation/ - https://plugins.trac.wordpress.org/browser/contest-gallery/tags/26.0.5/shortcodes/cg_entry_on_off.php#L20 - https://wordpress.org/plugins/contest-gallery/#developers - https://plugins.trac.wordpress.org/changeset/3288915 - https://plugins.trac.wordpress.
ins/contest-gallery/#developers - https://plugins.trac.wordpress.org/changeset/3288915 - https://plugins.trac.wordpress.org/browser/contest-gallery/tags/26.0.7/shortcodes/cg_entry_on_off.php#L20
CVE ID: CVE-2025-3863 State: PUBLISHED Published: 2025-06-26T02:06:32.222Z Last Updated: 2025-06-26T13:27:42.404Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: plugindevs Products: Post Carousel Slider for Elementor Problem Types: CWE-862 Description: The Post Carousel Slider for Elementor plugin for WordPress is vulnerable to improper authorization due to a missing capability check on the process_wbelps_promo_form() function in all versions up to, and including, 1.6.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to trigger the plugin’s support‐form handler to send arbitrary emails to the site’s support addre
evel access and above, to trigger the plugin’s support‐form handler to send arbitrary emails to the site’s support address. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0b92afdf-51e0-4cf5-9f2b-997b9ff98b23?source=cve - https://plugins.trac.wordpress.org/browser/post-carousel-slider-for-elementor/tags/1.5.0/support-page/class-support-page.php#L28 - https://wordpress.org/plugins/post-carousel-slider-for-elementor/#developers - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3316424%40post-carousel-slider-for-elementor&new=3316424%40post-carousel-slider-for-elementor&sfp_email=&sfph_ma
me=&old=3316424%40post-carousel-slider-for-elementor&new=3316424%40post-carousel-slider-for-elementor&sfp_email=&sfph_mail=
CVE ID: CVE-2025-3864 State: PUBLISHED Published: 2025-05-28T11:19:15.208Z Last Updated: 2025-05-28T13:17:57.950Z Vendors: hackney Products: hackney Problem Types: CWE-772 Description: Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library. Fix for this issue has been included in 1.24.0 release. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/benoitc/hackney/issues/717 - https://cert.pl/en/posts/2025/05/CVE-2025-3864/
CVE ID: CVE-2025-3866 State: PUBLISHED Published: 2025-04-25T06:45:27.032Z Last Updated: 2025-04-25T16:02:19.812Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: rohanpawale Products: Add Google +1 (Plus one) social share Button Problem Types: CWE-79 Description: The Add Google +1 (Plus one) social share Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on the google-plus-one-share-button page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick
nauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/190a3b11-c6ca-4666-8c7f-b22bb4a4961d?source=cve - https://plugins.trac.wordpress.org/browser/add-google-plus-one-social-share-button/tags/1.0.0/gp_admin_page.php - https://wordpress.org/plugins/add-google-plus-one-social-share-button/
CVE ID: CVE-2025-3867 State: PUBLISHED Published: 2025-04-25T06:45:27.801Z Last Updated: 2025-04-25T16:02:10.765Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: rafe007 Products: Ajax Comment Form CST Problem Types: CWE-79 Description: The Ajax Comment Form CST plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2. This is due to missing or incorrect nonce validation via the 'acform_cst_settings' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as cl
icious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2a001b31-042d-451b-ad9e-df8d41d3c2b0?source=cve - https://wordpress.org/plugins/ajax-comment-form-cst/