Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-62937 State: PUBLISHED Published: 2025-10-27T01:34:03.973Z Last Updated: 2025-11-13T10:33:48.308Z Vendors: Johnny Products: Post List Featured Image Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Johnny Post List Featured Image post-list-featured-image allows Stored XSS.This issue affects Post List Featured Image: from n/a through <= 0.5.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/post-list-featured-image/vulnerability/wordpress-post-list-featured-image-plugin-0-5-9-cross-site-scripting-xss-vulnerability?_s_id=
atured-image/vulnerability/wordpress-post-list-featured-image-plugin-0-5-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62938 State: PUBLISHED Published: 2025-10-27T01:34:04.368Z Last Updated: 2025-11-13T10:33:48.315Z Vendors: Reoon Technology Products: Reoon Email Verifier Problem Types: CWE-862 Description: Missing Authorization vulnerability in Reoon Technology Reoon Email Verifier reoon-email-verifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Reoon Email Verifier: from n/a through <= 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/reoon-email-verifier/vulnerability/wordpress-reoon-email-verifier-plugin-2-0-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62939 State: PUBLISHED Published: 2025-10-27T01:34:04.735Z Last Updated: 2025-11-13T10:33:48.160Z Vendors: Joe Products: Open Currency Converter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Open Currency Converter artiss-currency-converter allows Stored XSS.This issue affects Open Currency Converter: from n/a through <= 1.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/artiss-currency-converter/vulnerability/wordpress-open-currency-converter-plugin-1-5-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62940 State: PUBLISHED Published: 2025-10-27T01:34:05.124Z Last Updated: 2025-11-13T10:33:48.335Z Vendors: Nick Diego Products: Blox Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nick Diego Blox Lite blox-lite allows Stored XSS.This issue affects Blox Lite: from n/a through <= 1.2.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/blox-lite/vulnerability/wordpress-blox-lite-plugin-1-2-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62941 State: PUBLISHED Published: 2025-10-27T01:34:05.575Z Last Updated: 2025-11-13T10:33:48.624Z Vendors: dFactory Products: Events Maker by dFactory Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dFactory Events Maker by dFactory events-maker allows Stored XSS.This issue affects Events Maker by dFactory: from n/a through <= 1.6.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/events-maker/vulnerability/wordpress-events-maker-by-dfactory-plugin-1-6-14-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62942 State: PUBLISHED Published: 2025-10-27T01:34:05.970Z Last Updated: 2025-11-13T10:33:48.351Z Vendors: tempranova Products: WP Mapbox GL JS Maps Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tempranova WP Mapbox GL JS Maps wp-mapbox-gl-js allows Stored XSS.This issue affects WP Mapbox GL JS Maps: from n/a through <= 3.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-mapbox-gl-js/vulnerability/wordpress-wp-mapbox-gl-js-maps-plugin-3-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62943 State: PUBLISHED Published: 2025-10-27T01:34:06.378Z Last Updated: 2025-11-13T10:33:48.706Z Vendors: Matt McInvale Products: Next Page, Not Next Post Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt McInvale Next Page, Not Next Post next-page-not-next-post allows Stored XSS.This issue affects Next Page, Not Next Post: from n/a through <= 0.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/next-page-not-next-post/vulnerability/wordpress-next-page-not-next-post-plugin-0-3-0-cross-site-scripting-xss-vulnerabi
/next-page-not-next-post/vulnerability/wordpress-next-page-not-next-post-plugin-0-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62944 State: PUBLISHED Published: 2025-10-27T01:34:06.759Z Last Updated: 2025-11-13T10:33:48.393Z Vendors: Mark O'Donnell Products: MSTW CSV EXPORTER Problem Types: CWE-862 Description: Missing Authorization vulnerability in Mark O'Donnell MSTW CSV EXPORTER mstw-csv-exporter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MSTW CSV EXPORTER: from n/a through <= 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/mstw-csv-exporter/vulnerability/wordpress-mstw-csv-exporter-plugin-1-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62945 State: PUBLISHED Published: 2025-10-27T01:34:07.137Z Last Updated: 2025-11-13T10:33:48.588Z Vendors: Eduard Pinuaga Linares Products: Did Prestashop Display Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Eduard Pinuaga Linares Did Prestashop Display did-prestashop-display allows Stored XSS.This issue affects Did Prestashop Display: from n/a through <= 1.0.30. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/did-prestashop-display/vulnerability/wordpress-did-prestashop-display-plugin-1-0-30-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-62946 State: PUBLISHED Published: 2025-10-27T01:34:07.532Z Last Updated: 2025-11-13T10:33:48.278Z Vendors: everestthemes Products: Everest Backup Problem Types: CWE-862 Description: Missing Authorization vulnerability in everestthemes Everest Backup everest-backup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Everest Backup: from n/a through <= 2.3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/everest-backup/vulnerability/wordpress-everest-backup-plugin-2-3-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62947 State: PUBLISHED Published: 2025-10-27T01:34:07.905Z Last Updated: 2025-11-13T10:33:48.367Z Vendors: publitio Products: Publitio Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in publitio Publitio publitio allows Retrieve Embedded Sensitive Data.This issue affects Publitio: from n/a through <= 2.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/publitio/vulnerability/wordpress-publitio-plugin-2-2-3-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-62948 State: PUBLISHED Published: 2025-10-27T01:34:08.293Z Last Updated: 2025-11-13T10:33:48.354Z Vendors: Konstantin Pankratov Products: Date counter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Konstantin Pankratov Date counter date-counter allows Stored XSS.This issue affects Date counter: from n/a through <= 2.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/date-counter/vulnerability/wordpress-date-counter-plugin-2-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62949 State: PUBLISHED Published: 2025-10-27T01:34:08.667Z Last Updated: 2025-11-13T10:33:48.570Z Vendors: BuddyDev Products: Activity Plus Reloaded for BuddyPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BuddyDev Activity Plus Reloaded for BuddyPress bp-activity-plus-reloaded allows Stored XSS.This issue affects Activity Plus Reloaded for BuddyPress: from n/a through <= 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/bp-activity-plus-reloaded/vulnerability/wordpress-activity-plus-reloaded-for-buddypress-
k.com/database/Wordpress/Plugin/bp-activity-plus-reloaded/vulnerability/wordpress-activity-plus-reloaded-for-buddypress-plugin-1-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62950 State: PUBLISHED Published: 2025-11-06T15:56:04.961Z Last Updated: 2025-11-13T10:33:48.193Z Vendors: Wasiliy Strecker / ContestGallery developer Products: Contest Gallery Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Cross Site Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/contest-gallery/vulnerability/wordpress-contest-gallery-plugin-28-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-62951 State: PUBLISHED Published: 2025-10-27T01:34:09.049Z Last Updated: 2025-11-13T10:33:48.186Z Vendors: icc0rz Products: Interactive Content – H5P Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icc0rz Interactive Content – H5P h5p allows Stored XSS.This issue affects Interactive Content – H5P: from n/a through <= 1.16.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/h5p/vulnerability/wordpress-interactive-content-h5p-plugin-1-16-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62952 State: PUBLISHED Published: 2025-10-27T01:34:09.465Z Last Updated: 2025-11-13T10:33:48.416Z Vendors: QuantumCloud Products: ChatBot Problem Types: CWE-862 Description: Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through <= 7.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/chatbot/vulnerability/wordpress-chatbot-plugin-7-3-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62953 State: PUBLISHED Published: 2025-10-27T01:34:09.846Z Last Updated: 2025-11-13T10:33:48.461Z Vendors: nanbu Products: Welcart e-Commerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in nanbu Welcart e-Commerce usc-e-shop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Welcart e-Commerce: from n/a through <= 2.11.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/usc-e-shop/vulnerability/wordpress-welcart-e-commerce-plugin-2-11-24-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62954 State: PUBLISHED Published: 2025-10-27T01:34:10.251Z Last Updated: 2025-11-13T10:33:48.601Z Vendors: Codeinwp Products: Revive Old Posts Problem Types: CWE-862 Description: Missing Authorization vulnerability in Codeinwp Revive Old Posts tweet-old-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive Old Posts: from n/a through <= 9.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/tweet-old-post/vulnerability/wordpress-revive-old-posts-plugin-9-3-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62956 State: PUBLISHED Published: 2025-10-27T01:34:10.627Z Last Updated: 2025-11-13T10:33:48.494Z Vendors: iseremet Products: Reloadly Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in iseremet Reloadly reloadly-topup-widget allows Stored XSS.This issue affects Reloadly: from n/a through <= 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/reloadly-topup-widget/vulnerability/wordpress-reloadly-plugin-2-0-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-62957 State: PUBLISHED Published: 2025-10-27T01:34:10.997Z Last Updated: 2025-11-13T10:33:48.217Z Vendors: NikanWP Products: NikanWP WooCommerce Reporting Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in NikanWP NikanWP WooCommerce Reporting wc-reports-lite allows Stored XSS.This issue affects NikanWP WooCommerce Reporting: from n/a through <= 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wc-reports-lite/vulnerability/wordpress-nikanwp-woocommerce-reporting-plugin-1-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-62958 State: PUBLISHED Published: 2025-10-27T01:34:11.386Z Last Updated: 2025-11-13T10:33:48.467Z Vendors: Clifton Griffin Products: Simple Content Templates for Blog Posts &amp; Pages Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Clifton Griffin Simple Content Templates for Blog Posts &amp; Pages simple-post-template allows Cross Site Request Forgery.This issue affects Simple Content Templates for Blog Posts &amp; Pages: from n/a through <= 2.2.61. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/simple-post-template/vulnerability/wordpress-simple-content-templates-
ps://vdp.patchstack.com/database/Wordpress/Plugin/simple-post-template/vulnerability/wordpress-simple-content-templates-for-blog-posts-pages-plugin-2-2-61-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-62959 State: PUBLISHED Published: 2025-10-27T01:34:11.771Z Last Updated: 2025-11-13T10:33:48.572Z Vendors: videowhisper Products: Paid Videochat Turnkey Site Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Remote Code Inclusion.This issue affects Paid Videochat Turnkey Site: from n/a through <= 7.3.22. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/ppv-live-webcams/vulnerability/wordpress-paid-videochat-turnkey-site-plugin-7-3-22-remote-code-execution-rce-vulnerability?_s_id=cve
CVE ID: CVE-2025-62962 State: PUBLISHED Published: 2025-10-27T01:34:12.156Z Last Updated: 2025-11-13T10:33:48.658Z Vendors: Andrea Landonio Products: CloudSearch Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Andrea Landonio CloudSearch cloud-search allows Stored XSS.This issue affects CloudSearch: from n/a through <= 3.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/cloud-search/vulnerability/wordpress-cloudsearch-plugin-3-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-62963 State: PUBLISHED Published: 2025-10-27T01:34:12.534Z Last Updated: 2025-11-13T10:33:48.543Z Vendors: Estatik Products: Estatik Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Estatik Estatik estatik allows DOM-Based XSS.This issue affects Estatik: from n/a through <= 4.1.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/estatik/vulnerability/wordpress-estatik-plugin-4-1-13-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62964 State: PUBLISHED Published: 2025-10-27T01:34:12.925Z Last Updated: 2025-11-13T10:33:48.432Z Vendors: RealMag777 Products: MDTF Problem Types: CWE-862 Description: Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through <= 1.3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-meta-data-filter-and-taxonomy-filter/vulnerability/wordpress-mdtf-plugin-1-3-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62965 State: PUBLISHED Published: 2025-10-27T01:34:13.305Z Last Updated: 2025-11-13T10:33:48.406Z Vendors: wpseek Products: Admin Management Xtended Problem Types: CWE-862 Description: Missing Authorization vulnerability in wpseek Admin Management Xtended admin-management-xtended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Admin Management Xtended : from n/a through <= 2.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/admin-management-xtended/vulnerability/wordpress-admin-management-xtended-plugin-2-5-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62966 State: PUBLISHED Published: 2025-10-27T01:34:13.698Z Last Updated: 2025-11-13T10:33:48.744Z Vendors: Apiki Products: GoCache Problem Types: CWE-862 Description: Missing Authorization vulnerability in Apiki GoCache gocache-cdn allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoCache: from n/a through <= 1.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/gocache-cdn/vulnerability/wordpress-gocache-plugin-1-3-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62967 State: PUBLISHED Published: 2025-10-27T01:34:14.079Z Last Updated: 2025-11-13T10:33:48.414Z Vendors: designinvento Products: DirectoryPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designinvento DirectoryPress directorypress allows DOM-Based XSS.This issue affects DirectoryPress: from n/a through <= 3.6.25. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/directorypress/vulnerability/wordpress-directorypress-plugin-3-6-25-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62968 State: PUBLISHED Published: 2025-10-27T01:34:14.465Z Last Updated: 2025-11-13T10:33:48.544Z Vendors: Sayan Datta Products: WP Last Modified Info Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sayan Datta WP Last Modified Info wp-last-modified-info allows Stored XSS.This issue affects WP Last Modified Info: from n/a through <= 1.9.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-last-modified-info/vulnerability/wordpress-wp-last-modified-info-plugin-1-9-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62969 State: PUBLISHED Published: 2025-10-27T01:34:14.860Z Last Updated: 2025-11-13T10:33:48.671Z Vendors: XLPlugins Products: NextMove Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Stored XSS.This issue affects NextMove Lite: from n/a through <= 2.21.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/woo-thank-you-page-nextmove-lite/vulnerability/wordpress-nextmove-lite-plugin-2-21-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62970 State: PUBLISHED Published: 2025-10-27T01:34:15.242Z Last Updated: 2025-11-13T10:33:48.458Z Vendors: Spencer Haws Products: Link Whisper Free Problem Types: CWE-862 Description: Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through <= 0.8.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/link-whisper/vulnerability/wordpress-link-whisper-free-plugin-0-8-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62971 State: PUBLISHED Published: 2025-10-27T01:34:15.629Z Last Updated: 2025-11-13T10:33:48.691Z Vendors: CrestaProject Products: Attesa Extra Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrestaProject Attesa Extra attesa-extra allows Stored XSS.This issue affects Attesa Extra: from n/a through <= 1.4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/attesa-extra/vulnerability/wordpress-attesa-extra-plugin-1-4-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62972 State: PUBLISHED Published: 2025-10-27T01:34:16.018Z Last Updated: 2025-11-13T10:33:48.696Z Vendors: WPWebinarSystem Products: WebinarPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-webinarsystem/vulnerability/wordpress-webinarpress-plugin-1-33-28-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62973 State: PUBLISHED Published: 2025-10-27T01:34:16.394Z Last Updated: 2025-11-13T10:33:48.556Z Vendors: Themekraft Products: BuddyForms Problem Types: CWE-862 Description: Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through <= 2.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/buddyforms/vulnerability/wordpress-buddyforms-plugin-2-9-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62974 State: PUBLISHED Published: 2025-10-27T01:34:16.779Z Last Updated: 2025-11-13T10:33:48.494Z Vendors: CoSchedule Products: Headline Analyzer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Stored XSS.This issue affects Headline Analyzer: from n/a through <= 1.3.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/headline-analyzer/vulnerability/wordpress-headline-analyzer-plugin-1-3-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62975 State: PUBLISHED Published: 2025-10-27T01:34:17.146Z Last Updated: 2025-11-13T10:33:48.609Z Vendors: raychat Products: Raychat Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in raychat Raychat raychat allows Cross Site Request Forgery.This issue affects Raychat: from n/a through <= 2.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/raychat/vulnerability/wordpress-raychat-plugin-2-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve