Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-46495 State: PUBLISHED Published: 2025-04-24T16:08:51.253Z Last Updated: 2025-04-25T13:52:50.152Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: tomontoast Products: Drop Caps Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in tomontoast Drop Caps allows Stored XSS. This issue affects Drop Caps: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/drop-caps/vulnerability/wordpress-drop-caps-plugin-2-1-csrf-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46496 State: PUBLISHED Published: 2025-04-24T16:09:11.948Z Last Updated: 2025-04-24T20:02:07.391Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: oniswap Products: Mini twitter feed Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in oniswap Mini twitter feed allows Stored XSS. This issue affects Mini twitter feed: from n/a through 3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mini-twitter-feed/vulnerability/wordpress-mini-twitter-feed-3-0-cross-site-scripting-xss-vulnerability?_s_id=cv
s/plugin/mini-twitter-feed/vulnerability/wordpress-mini-twitter-feed-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46497 State: PUBLISHED Published: 2025-04-24T16:08:51.811Z Last Updated: 2025-04-25T13:52:38.826Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Navegg Products: Navegg Analytics Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Navegg Navegg Analytics allows Stored XSS. This issue affects Navegg Analytics: from n/a through 3.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/navegg/vulnerability/wordpress-navegg-analytics-plugin-3-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-46498 State: PUBLISHED Published: 2025-04-24T16:09:27.592Z Last Updated: 2025-04-24T19:58:47.319Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: nghialuu Products: Zalo Official Live Chat Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in nghialuu Zalo Official Live Chat allows Cross Site Request Forgery. This issue affects Zalo Official Live Chat: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/zalo-official-live-chat/vulnerability/wordpress-zalo-official-live-chat-1-0-0-cross-site-request-forgery-csrf-vulnerability
o-official-live-chat/vulnerability/wordpress-zalo-official-live-chat-1-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-46499 State: PUBLISHED Published: 2025-04-24T16:08:52.364Z Last Updated: 2025-04-25T13:52:31.191Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: hccoder Products: PayPal Express Checkout Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hccoder PayPal Express Checkout allows Stored XSS. This issue affects PayPal Express Checkout: from n/a through 2.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/paypal-express-checkout/vulnerability/wordpress-paypal-express-checkout-plugin-2-1-2-cross-si
/database/wordpress/plugin/paypal-express-checkout/vulnerability/wordpress-paypal-express-checkout-plugin-2-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-46500 State: PUBLISHED Published: 2025-07-16T11:28:04.238Z Last Updated: 2025-07-16T18:49:27.713Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ValvePress Products: Wordpress Auto Spinner Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ValvePress Wordpress Auto Spinner allows Reflected XSS. This issue affects Wordpress Auto Spinner: from n/a through 3.25.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-auto-spinner/vulnerability/wordpress-wordpress-auto-spinner-plugin-3-25-0-reflected
ack.com/database/wordpress/plugin/wp-auto-spinner/vulnerability/wordpress-wordpress-auto-spinner-plugin-3-25-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46501 State: PUBLISHED Published: 2025-04-24T16:09:12.520Z Last Updated: 2025-04-24T20:01:58.071Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: biancardi Products: Mixcloud Embed Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in biancardi Mixcloud Embed allows Stored XSS. This issue affects Mixcloud Embed: from n/a through 2.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mixcloud-embed/vulnerability/wordpress-mixcloud-embed-2-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46502 State: PUBLISHED Published: 2025-04-24T16:08:53.027Z Last Updated: 2025-04-25T13:52:22.398Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Bas Matthee Products: LSD Custom taxonomy and category meta Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bas Matthee LSD Custom taxonomy and category meta allows Cross Site Request Forgery. This issue affects LSD Custom taxonomy and category meta: from n/a through 1.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-taxonomy-category-an
tes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-taxonomy-category-and-term-fields/vulnerability/wordpress-lsd-custom-taxonomy-and-category-meta-plugin-1-3-2-csrf-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46503 State: PUBLISHED Published: 2025-04-24T16:09:22.403Z Last Updated: 2025-04-24T19:59:59.316Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: josheli Products: Simple Google Photos Grid Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in josheli Simple Google Photos Grid allows Server Side Request Forgery. This issue affects Simple Google Photos Grid: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-google-photos-grid/vulnerability/wordpress-simple-google-photos-grid-1-5-server-side-request-forgery-ssrf-vulner
/simple-google-photos-grid/vulnerability/wordpress-simple-google-photos-grid-1-5-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-46504 State: PUBLISHED Published: 2025-04-24T16:08:53.617Z Last Updated: 2025-04-25T13:52:12.429Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Olar Marius Products: Vasaio QR Code Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Olar Marius Vasaio QR Code allows Stored XSS. This issue affects Vasaio QR Code: from n/a through 1.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/vasaio-qr-code/vulnerability/wordpress-vasaio-qr-code-plugin-1-2-5-csrf-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46505 State: PUBLISHED Published: 2025-04-24T16:09:13.086Z Last Updated: 2025-04-24T20:01:49.404Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: farinspace Products: Peekaboo Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in farinspace Peekaboo allows Stored XSS. This issue affects Peekaboo: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/peekaboo/vulnerability/wordpress-peekaboo-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46506 State: PUBLISHED Published: 2025-04-24T16:08:54.198Z Last Updated: 2025-04-25T13:52:04.714Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Lora77 Products: WpZon – Amazon Affiliate Plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Lora77 WpZon – Amazon Affiliate Plugin allows Reflected XSS. This issue affects WpZon – Amazon Affiliate Plugin: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpzon/vulnerability/wordpress-wpzon-amazon-affiliate-plugin-plugin-1-3-csrf-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46507 State: PUBLISHED Published: 2025-04-24T16:09:25.870Z Last Updated: 2025-04-24T19:59:10.088Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ldrumm Products: Unsafe Mimetypes Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ldrumm Unsafe Mimetypes allows Stored XSS. This issue affects Unsafe Mimetypes: from n/a through 0.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/unsafe-mimetypes/vulnerability/wordpress-unsafe-mimetypes-plugin-0-1-4-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46508 State: PUBLISHED Published: 2025-04-24T16:08:54.763Z Last Updated: 2025-04-25T13:51:55.611Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: kasonzhao Products: Advanced lazy load Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in kasonzhao Advanced lazy load allows Stored XSS. This issue affects Advanced lazy load: from n/a through 1.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/advanced-lazy-load/vulnerability/wordpress-advanced-lazy-load-plugin-1-6-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46509 State: PUBLISHED Published: 2025-04-24T16:09:13.671Z Last Updated: 2025-04-24T20:01:41.349Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Andrey Mikhalchuk Products: 360 View Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andrey Mikhalchuk 360 View allows Stored XSS. This issue affects 360 View: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/360-view/vulnerability/wordpress-360-view-1-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46510 State: PUBLISHED Published: 2025-04-24T16:08:55.340Z Last Updated: 2025-04-25T13:51:46.144Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: harrysudana Products: Contact Form 7 Calendar Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in harrysudana Contact Form 7 Calendar allows Stored XSS. This issue affects Contact Form 7 Calendar: from n/a through 3.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cf7-calendar/vulnerability/wordpress-contact-form-7-calendar-plugin-3-0-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46511 State: PUBLISHED Published: 2025-04-24T16:09:23.029Z Last Updated: 2025-04-24T19:59:49.450Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Derek Springer Products: BeerXML Shortcode Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Derek Springer BeerXML Shortcode allows Server Side Request Forgery. This issue affects BeerXML Shortcode: from n/a through 0.71. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/beerxml-shortcode/vulnerability/wordpress-beerxml-shortcode-0-71-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-46512 State: PUBLISHED Published: 2025-04-24T16:08:55.906Z Last Updated: 2025-04-25T13:51:37.774Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Shamim Hasan Products: Custom Functions Plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Shamim Hasan Custom Functions Plugin allows Stored XSS. This issue affects Custom Functions Plugin: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-functions/vulnerability/wordpress-custom-functions-plugin-plugin-1-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46513 State: PUBLISHED Published: 2025-04-24T16:09:14.256Z Last Updated: 2025-04-24T20:01:33.888Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Codebangers Products: All in One Time Clock Lite Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Codebangers All in One Time Clock Lite allows Cross Site Request Forgery. This issue affects All in One Time Clock Lite: from n/a through 1.3.324. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/aio-time-clock-lite/vulnerability/wordpress-all-in-one-time-clock-lite-1-3-324-cross-site-request-forgery-
dpress/plugin/aio-time-clock-lite/vulnerability/wordpress-all-in-one-time-clock-lite-1-3-324-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-46514 State: PUBLISHED Published: 2025-04-24T16:08:56.469Z Last Updated: 2025-04-25T13:51:28.858Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: milat Products: Milat jQuery Automatic Popup Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in milat Milat jQuery Automatic Popup allows Stored XSS. This issue affects Milat jQuery Automatic Popup: from n/a through 1.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/milat-jquery-automatic-popup/vulnerability/wordpress-milat-jquery-automatic-popup-plugin-1-3-1-csrf-to-stored-xss-vulnerability?_s_i
-automatic-popup/vulnerability/wordpress-milat-jquery-automatic-popup-plugin-1-3-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46515 State: PUBLISHED Published: 2025-05-23T12:43:39.839Z Last Updated: 2025-05-23T14:54:37.524Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: M A Vinoth Kumar Products: Category Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M A Vinoth Kumar Category Widget allows Reflected XSS. This issue affects Category Widget: from n/a through 2.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/category-widget/vulnerability/wordpress-category-widget-plugin-2-0-2-reflected-cross-site-script
tabase/wordpress/plugin/category-widget/vulnerability/wordpress-category-widget-plugin-2-0-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46516 State: PUBLISHED Published: 2025-04-24T16:08:57.029Z Last Updated: 2025-04-25T13:51:19.449Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: silencecm Products: Twitter Card Generator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in silencecm Twitter Card Generator allows Stored XSS. This issue affects Twitter Card Generator: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/twitter-card-generator/vulnerability/wordpress-twitter-card-generator-plugin-1-0-5-cross-site-request-forgery-csrf-to-stored-xss-vulnerability
/vulnerability/wordpress-twitter-card-generator-plugin-1-0-5-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46517 State: PUBLISHED Published: 2025-04-24T16:09:14.847Z Last Updated: 2025-04-24T20:01:24.550Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: wpdiscover Products: Blog Manager WP Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdiscover Blog Manager WP allows Stored XSS. This issue affects Blog Manager WP: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/blog-manager-wp/vulnerability/wordpress-blog-manager-wp-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cv
ess/plugin/blog-manager-wp/vulnerability/wordpress-blog-manager-wp-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46518 State: PUBLISHED Published: 2025-05-23T12:43:39.386Z Last Updated: 2025-05-23T14:54:56.953Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: phpaddicted Products: IGIT Related Posts With Thumb Image After Posts Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phpaddicted IGIT Related Posts With Thumb Image After Posts allows Stored XSS. This issue affects IGIT Related Posts With Thumb Image After Posts: from n/a through 4.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/igit-relate
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/igit-related-posts-with-thumb-images-after-posts/vulnerability/wordpress-igit-related-posts-with-thumb-image-after-posts-4-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46519 State: PUBLISHED Published: 2025-04-24T16:09:23.610Z Last Updated: 2025-04-24T19:59:41.349Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Michael Revellin-Clerc Products: Media Library Downloader Problem Types: CWE-862 Description: Missing Authorization vulnerability in Michael Revellin-Clerc Media Library Downloader allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Library Downloader: from n/a through 1.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/media-library-downloader/vulnerability/wordpress-media-library-dow
s: - https://patchstack.com/database/wordpress/plugin/media-library-downloader/vulnerability/wordpress-media-library-downloader-1-3-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-46520 State: PUBLISHED Published: 2025-04-24T16:08:57.612Z Last Updated: 2025-04-25T13:51:10.816Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: alphasis Products: Related Posts via Taxonomies Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in alphasis Related Posts via Taxonomies allows Stored XSS. This issue affects Related Posts via Taxonomies: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/related-posts-via-taxonomies/vulnerability/wordpress-related-posts-via-taxonomies-plugin-1-0-1-cross-site-request-forgery-csrf
d-posts-via-taxonomies/vulnerability/wordpress-related-posts-via-taxonomies-plugin-1-0-1-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46521 State: PUBLISHED Published: 2025-04-24T16:09:15.417Z Last Updated: 2025-04-24T20:01:17.143Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Silver Muru Products: WS Force Login Page Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Silver Muru WS Force Login Page allows Stored XSS. This issue affects WS Force Login Page: from n/a through 3.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ws-force-login-page/vulnerability/wordpress-ws-force-login-page-3-0-3-cross-site-scripting-xss-
atabase/wordpress/plugin/ws-force-login-page/vulnerability/wordpress-ws-force-login-page-3-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46522 State: PUBLISHED Published: 2025-04-24T16:08:58.176Z Last Updated: 2025-04-25T13:51:00.707Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Billy Bryant Products: Tabs Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Billy Bryant Tabs allows Stored XSS. This issue affects Tabs: from n/a through 4.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gt-tabs/vulnerability/wordpress-tabs-plugin-4-0-3-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46523 State: PUBLISHED Published: 2025-04-24T16:09:26.412Z Last Updated: 2025-04-24T19:59:03.028Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: devignstudiosltd Products: COVID-19 (Coronavirus) Update Your Customers Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devignstudiosltd COVID-19 (Coronavirus) Update Your Customers allows Stored XSS. This issue affects COVID-19 (Coronavirus) Update Your Customers: from n/a through 1.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/covid-19-a
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/covid-19-alert/vulnerability/wordpress-covid-19-coronavirus-update-your-customers-1-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46524 State: PUBLISHED Published: 2025-04-24T16:08:58.832Z Last Updated: 2025-04-24T18:28:32.600Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: stesvis Products: WP Filter Post Category Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in stesvis WP Filter Post Category allows Stored XSS. This issue affects WP Filter Post Category: from n/a through 2.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-filter-post-categories/vulnerability/wordpress-wp-filter-post-category-plugin-2-1-4-cross-site-request-forgery-csrf-to-stored-xss-vulnerabil
es/vulnerability/wordpress-wp-filter-post-category-plugin-2-1-4-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46525 State: PUBLISHED Published: 2025-04-24T16:09:15.981Z Last Updated: 2025-04-24T18:12:55.993Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: msmitley Products: WP Cookie Consent Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in msmitley WP Cookie Consent allows Stored XSS. This issue affects WP Cookie Consent: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-cookie-consent/vulnerability/wordpress-wp-cookie-consent-1-0-cross-site-scripting-xss-vulnerability?_s_id=
ess/plugin/wp-cookie-consent/vulnerability/wordpress-wp-cookie-consent-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve