Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
erences: - https://patchstack.com/database/wordpress/plugin/wp-employee-attendance-system/vulnerability/wordpress-wp-employee-attendance-system-3-5-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-28974 State: PUBLISHED Published: 2025-06-06T12:54:32.342Z Last Updated: 2025-06-06T16:23:59.146Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: mail250 Products: Free WP Mail SMTP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in mail250 Free WP Mail SMTP allows Stored XSS. This issue affects Free WP Mail SMTP: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/free-wp-mail-smtp/vulnerability/wordpress-free-wp-mail-smtp-plugin-1-0-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-28975 State: PUBLISHED Published: 2025-08-14T10:34:34.059Z Last Updated: 2025-08-14T19:46:56.815Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: redqteam Products: Alike - WordPress Custom Post Comparison Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in redqteam Alike - WordPress Custom Post Comparison allows Reflected XSS. This issue affects Alike - WordPress Custom Post Comparison: from n/a through 3.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/alike/vulnerability/wordpress-alike-w
A ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/alike/vulnerability/wordpress-alike-wordpress-custom-post-comparison-3-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-28976 State: PUBLISHED Published: 2025-07-04T11:18:09.708Z Last Updated: 2025-07-07T14:58:32.999Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: dsrodzin Products: Email Address Security by WebEmailProtector Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dsrodzin Email Address Security by WebEmailProtector allows Stored XSS. This issue affects Email Address Security by WebEmailProtector: from n/a through 3.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/webemailprotector/vulnerabili
s: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/webemailprotector/vulnerability/wordpress-email-address-security-by-webemailprotector-3-3-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-28977 State: PUBLISHED Published: 2025-08-20T08:03:48.107Z Last Updated: 2025-08-20T18:04:08.068Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ThimPress Products: WP Pipes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress WP Pipes allows Reflected XSS. This issue affects WP Pipes: from n/a through 1.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-pipes/vulnerability/wordpress-wp-pipes-plugin-1-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-28978 State: PUBLISHED Published: 2025-07-04T11:18:09.217Z Last Updated: 2025-07-07T14:58:40.252Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Hung Trang Si Products: SB Breadcrumbs Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hung Trang Si SB Breadcrumbs allows Reflected XSS. This issue affects SB Breadcrumbs: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sb-breadcrumbs/vulnerability/wordpress-sb-breadcrumbs-plugin-1-0-reflected-cross-site-scripting-xss-vulnera
press/plugin/sb-breadcrumbs/vulnerability/wordpress-sb-breadcrumbs-plugin-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-28979 State: PUBLISHED Published: 2025-08-14T10:34:33.537Z Last Updated: 2025-08-14T19:46:19.752Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ThimPress Products: WP Pipes Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThimPress WP Pipes allows PHP Local File Inclusion. This issue affects WP Pipes: from n/a through 1.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-pipes/vulnerability/wordpress-wp-pipes-1-4-3-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-28980 State: PUBLISHED Published: 2025-07-04T11:18:08.713Z Last Updated: 2025-07-07T14:58:47.510Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: machouinard Products: Aviation Weather from NOAA Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in machouinard Aviation Weather from NOAA allows Path Traversal. This issue affects Aviation Weather from NOAA: from n/a through 0.7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/aviation-weather-from-noaa/vulnerability/wordpress-aviation-weather-from-noaa-
/patchstack.com/database/wordpress/plugin/aviation-weather-from-noaa/vulnerability/wordpress-aviation-weather-from-noaa-0-7-2-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-28981 State: PUBLISHED Published: 2025-06-06T12:54:31.893Z Last Updated: 2025-06-06T16:24:06.234Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Soli Products: WP Mail Options Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Soli WP Mail Options allows Stored XSS. This issue affects WP Mail Options: from n/a through 0.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-mail-options/vulnerability/wordpress-wp-mail-options-plugin-0-2-3-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-28982 State: PUBLISHED Published: 2025-07-16T11:28:11.175Z Last Updated: 2025-07-16T13:41:38.839Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: ThimPress Products: WP Pipes Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThimPress WP Pipes allows SQL Injection. This issue affects WP Pipes: from n/a through 1.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-pipes/vulnerability/wordpress-wp-pipes-1-4-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-28983 State: PUBLISHED Published: 2025-07-04T11:18:08.175Z Last Updated: 2025-07-07T14:58:54.635Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ClickandPledge Products: Click & Pledge Connect Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickandPledge Click & Pledge Connect allows Privilege Escalation. This issue affects Click & Pledge Connect: from 25.04010101 through WP6.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/click-pledge-connect/vulnerability/wordpress-click-pledge-co
erences: - https://patchstack.com/database/wordpress/plugin/click-pledge-connect/vulnerability/wordpress-click-pledge-connect-plugin-25-04010101-wp6-8-privilege-escalation-via-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-28984 State: PUBLISHED Published: 2025-06-06T12:54:31.442Z Last Updated: 2025-06-06T16:24:11.620Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: storepro Products: Subscription Renewal Reminders for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in storepro Subscription Renewal Reminders for WooCommerce allows Cross Site Request Forgery. This issue affects Subscription Renewal Reminders for WooCommerce: from n/a through 1.3.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/subscriptions-renewal-reminders/vulnerability/wordpres
t: References: - https://patchstack.com/database/wordpress/plugin/subscriptions-renewal-reminders/vulnerability/wordpress-subscription-renewal-reminders-for-woocommerce-plugin-1-3-7-cross-site-request-forgery-to-notice-dismissal-vulnerability?_s_id=cve
CVE ID: CVE-2025-28985 State: PUBLISHED Published: 2025-06-06T12:54:30.985Z Last Updated: 2025-06-06T16:24:17.203Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Elastic Email Products: Elastic Email Subscribe Form Problem Types: CWE-862 Description: Missing Authorization vulnerability in Elastic Email Elastic Email Subscribe Form allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elastic Email Subscribe Form: from n/a through 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/elastic-email-subscribe-form/vulnerability/wordpress-elastic-email-subsc
ttps://patchstack.com/database/wordpress/plugin/elastic-email-subscribe-form/vulnerability/wordpress-elastic-email-subscribe-form-1-2-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-28986 State: PUBLISHED Published: 2025-06-06T12:54:30.522Z Last Updated: 2025-06-06T16:24:23.110Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L) Vendors: Webaholicson Products: Epicwin Plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Webaholicson Epicwin Plugin allows SQL Injection. This issue affects Epicwin Plugin: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/epicwin-subscribers/vulnerability/wordpress-epicwin-plugin-plugin-1-5-csrf-to-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-28987 State: PUBLISHED Published: 2025-08-14T10:34:32.614Z Last Updated: 2025-08-14T19:45:42.726Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: PressForward Products: PressForward Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in PressForward PressForward allows Server Side Request Forgery. This issue affects PressForward: from n/a through 5.9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pressforward/vulnerability/wordpress-pressforward-5-8-0-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-28988 State: PUBLISHED Published: 2025-06-27T11:52:41.821Z Last Updated: 2025-06-27T13:41:58.140Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: aharonyan Products: WP Front User Submit / Front Editor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aharonyan WP Front User Submit / Front Editor allows Reflected XSS. This issue affects WP Front User Submit / Front Editor: from n/a through 4.9.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/front-editor/vulnerability/wordpress-wp-front-user
hment: References: - https://patchstack.com/database/wordpress/plugin/front-editor/vulnerability/wordpress-wp-front-user-submit-front-editor-plugin-4-9-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-28989 State: PUBLISHED Published: 2025-06-06T12:54:30.062Z Last Updated: 2025-06-06T16:24:28.439Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: arildur Products: Read More Login Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arildur Read More Login allows Stored XSS. This issue affects Read More Login: from n/a through 2.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/read-more-login/vulnerability/wordpress-read-more-login-2-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-28990 State: PUBLISHED Published: 2025-06-27T11:52:41.200Z Last Updated: 2025-06-27T14:07:05.130Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: snstheme Products: SNS Vicky Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme SNS Vicky allows PHP Local File Inclusion. This issue affects SNS Vicky: from n/a through 3.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/snsvicky/vulnerability/wordpress-sns-vicky-3-7-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-28991 State: PUBLISHED Published: 2025-06-17T15:01:39.541Z Last Updated: 2025-06-17T17:39:29.817Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: snstheme Products: Evon Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Evon allows PHP Local File Inclusion. This issue affects Evon: from n/a through 3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/snsevon/vulnerability/wordpress-evon-3-4-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-28992 State: PUBLISHED Published: 2025-06-09T15:56:49.983Z Last Updated: 2025-06-09T17:22:24.232Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: snstheme Products: SNS Anton Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme SNS Anton allows PHP Local File Inclusion. This issue affects SNS Anton: from n/a through 4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/snsanton/vulnerability/wordpress-sns-anton-4-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-28993 State: PUBLISHED Published: 2025-06-27T11:52:40.573Z Last Updated: 2025-06-27T13:42:07.182Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Jose Products: Content No Cache Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Jose Content No Cache allows Code Injection. This issue affects Content No Cache: from n/a through 0.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/content-no-cache/vulnerability/wordpress-content-no-cache-plugin-0-1-3-arbitrary-function-call-vulnerability?_s_id=cve
CVE ID: CVE-2025-28994 State: PUBLISHED Published: 2025-06-06T12:54:29.584Z Last Updated: 2025-06-06T15:02:01.342Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: viralloops Products: Viral Loops WP Integration Problem Types: CWE-862 Description: Missing Authorization vulnerability in viralloops Viral Loops WP Integration allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Viral Loops WP Integration: from n/a through 3.8.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/viral-loops-wp-integration/vulnerability/wordpress-viral-loops-wp-integration-3-8-1-
stack.com/database/wordpress/plugin/viral-loops-wp-integration/vulnerability/wordpress-viral-loops-wp-integration-3-8-1-broken-access-control-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-28995 State: PUBLISHED Published: 2025-06-06T12:54:29.129Z Last Updated: 2025-06-06T14:58:08.378Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: viralloops Products: Viral Loops WP Integration Problem Types: CWE-862 Description: Missing Authorization vulnerability in viralloops Viral Loops WP Integration allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Viral Loops WP Integration: from n/a through 3.8.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/viral-loops-wp-integration/vulnerability/wordpress-viral-loops-wp-integration-3-8-1-
stack.com/database/wordpress/plugin/viral-loops-wp-integration/vulnerability/wordpress-viral-loops-wp-integration-3-8-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-28996 State: PUBLISHED Published: 2025-06-06T12:54:28.676Z Last Updated: 2025-06-06T15:02:21.113Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Thad Allender Products: GPP Slideshow Problem Types: CWE-862 Description: Missing Authorization vulnerability in Thad Allender GPP Slideshow allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GPP Slideshow: from n/a through 1.3.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gpp-slideshow/vulnerability/wordpress-gpp-slideshow-1-3-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-28997 State: PUBLISHED Published: 2025-06-06T12:54:28.235Z Last Updated: 2025-06-06T15:02:57.852Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: EXEIdeas International Products: WP AutoKeyword Problem Types: CWE-862 Description: Missing Authorization vulnerability in EXEIdeas International WP AutoKeyword allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP AutoKeyword: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-autokeyword/vulnerability/wordpress-wp-autokeyword-1-0-broken-access-control-vulnerability?_s_i
base/wordpress/plugin/wp-autokeyword/vulnerability/wordpress-wp-autokeyword-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-28998 State: PUBLISHED Published: 2025-06-27T11:52:39.988Z Last Updated: 2025-06-27T14:07:11.943Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: serpednet Products: SERPed.net Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in serpednet SERPed.net allows PHP Local File Inclusion. This issue affects SERPed.net: from n/a through 4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/serped-net/vulnerability/wordpress-serped-net-4-6-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-28999 State: PUBLISHED Published: 2025-08-14T10:34:32.081Z Last Updated: 2025-08-14T19:44:50.183Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ZoomIt Products: WooCommerce Shop Page Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZoomIt WooCommerce Shop Page Builder allows Reflected XSS. This issue affects WooCommerce Shop Page Builder: from n/a through 2.27.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dzs-wootable/vulnerability/wordpress-woocommerce-shop-page-builder-2-27-7
tps://patchstack.com/database/wordpress/plugin/dzs-wootable/vulnerability/wordpress-woocommerce-shop-page-builder-2-27-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-29000 State: PUBLISHED Published: 2025-07-16T11:28:10.658Z Last Updated: 2025-07-16T13:42:43.757Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: August Infotech Products: Multi-language Responsive Contact Form Problem Types: CWE-862 Description: Missing Authorization vulnerability in August Infotech Multi-language Responsive Contact Form allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Multi-language Responsive Contact Form: from n/a through 2.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/responsive-contact-form/vulnerability/wordpress-mu
hment: References: - https://patchstack.com/database/wordpress/plugin/responsive-contact-form/vulnerability/wordpress-multi-language-responsive-contact-form-2-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-29001 State: PUBLISHED Published: 2025-07-04T08:42:17.062Z Last Updated: 2025-07-08T17:38:44.589Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: ZoomIt Products: WooCommerce Shop Page Builder Problem Types: CWE-862 Description: Missing Authorization vulnerability in ZoomIt WooCommerce Shop Page Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WooCommerce Shop Page Builder: from n/a through 2.27.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dzs-wootable/vulnerability/wordpress-woocommerce-shop-page-builder-plugin-2-27-7-b
chstack.com/database/wordpress/plugin/dzs-wootable/vulnerability/wordpress-woocommerce-shop-page-builder-plugin-2-27-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-29002 State: PUBLISHED Published: 2025-06-17T15:01:39.046Z Last Updated: 2025-06-17T17:43:00.515Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: snstheme Products: Simen Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Simen allows PHP Local File Inclusion. This issue affects Simen: from n/a through 4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/snssimen/vulnerability/wordpress-simen-4-6-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-29003 State: PUBLISHED Published: 2025-06-06T12:54:27.779Z Last Updated: 2025-06-06T15:03:15.873Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: mva7 Products: The Holiday Calendar Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mva7 The Holiday Calendar allows Stored XSS. This issue affects The Holiday Calendar: from n/a through 1.18.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/the-holiday-calendar/vulnerability/wordpress-the-holiday-calendar-1-18-2-1-cross-site-scripting-xss-vul
wordpress/plugin/the-holiday-calendar/vulnerability/wordpress-the-holiday-calendar-1-18-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-29005 State: PUBLISHED Published: 2025-06-06T12:54:27.333Z Last Updated: 2025-06-06T15:03:34.632Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: weblizar Products: HR Management Lite Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in weblizar HR Management Lite allows Cross Site Request Forgery. This issue affects HR Management Lite: from n/a through 3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hr-management-lite/vulnerability/wordpress-hr-management-lite-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve