Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-49961 State: PUBLISHED Published: 2025-10-22T14:32:21.376Z Last Updated: 2025-11-13T10:33:41.761Z Vendors: Breeze Team Products: Breeze Checkout Problem Types: CWE-862 Description: Missing Authorization vulnerability in Breeze Team Breeze Checkout breeze-checkout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze Checkout: from n/a through <= 1.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/breeze-checkout/vulnerability/wordpress-breeze-checkout-plugin-1-4-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49962 State: PUBLISHED Published: 2025-10-22T14:32:21.576Z Last Updated: 2025-11-13T10:33:41.748Z Vendors: useStrict Products: bbPress Notify Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in useStrict bbPress Notify bbpress-notify-nospam allows Reflected XSS.This issue affects bbPress Notify: from n/a through <= 2.19.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/bbpress-notify-nospam/vulnerability/wordpress-bbpress-notify-plugin-2-19-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49963 State: PUBLISHED Published: 2025-10-22T14:32:21.783Z Last Updated: 2025-11-13T10:33:41.727Z Vendors: growniche Products: Simple Stripe Checkout Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in growniche Simple Stripe Checkout simple-stripe-checkout allows Reflected XSS.This issue affects Simple Stripe Checkout: from n/a through <= 1.1.28. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/simple-stripe-checkout/vulnerability/wordpress-simple-stripe-checkout-plugin-1-1-28-cross-site-scripting-xss-vulnerability?_s_id=c
ipe-checkout/vulnerability/wordpress-simple-stripe-checkout-plugin-1-1-28-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49964 State: PUBLISHED Published: 2025-06-20T15:04:23.124Z Last Updated: 2025-06-20T16:20:25.409Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: indgeek Products: ClipLink Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in indgeek ClipLink allows Cross Site Request Forgery. This issue affects ClipLink: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cliplink/vulnerability/wordpress-cliplink-plugin-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49965 State: PUBLISHED Published: 2025-06-20T15:04:22.655Z Last Updated: 2025-06-20T16:23:10.433Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Oganro Products: PixelBeds Channel Manager and Hotel Booking Engine Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Oganro PixelBeds Channel Manager and Hotel Booking Engine allows Cross Site Request Forgery. This issue affects PixelBeds Channel Manager and Hotel Booking Engine: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pixelbeds-channel-manager-booking-engine/vulnera
ichment: References: - https://patchstack.com/database/wordpress/plugin/pixelbeds-channel-manager-booking-engine/vulnerability/wordpress-pixelbeds-channel-manager-and-hotel-booking-engine-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49966 State: PUBLISHED Published: 2025-06-20T15:04:22.175Z Last Updated: 2025-06-20T16:24:09.621Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Oganro Products: Oganro Travel Portal Search Widget for HotelBeds APITUDE API Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Oganro Oganro Travel Portal Search Widget for HotelBeds APITUDE API allows Cross Site Request Forgery. This issue affects Oganro Travel Portal Search Widget for HotelBeds APITUDE API: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/oganro-travel-port
nalyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/oganro-travel-portal-search-widget-for-hotelbeds-apitude-api/vulnerability/wordpress-oganro-travel-portal-search-widget-for-hotelbeds-apitude-api-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49967 State: PUBLISHED Published: 2025-06-20T15:04:21.688Z Last Updated: 2025-06-20T16:25:10.666Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: marcusjansen Products: Live Sports Streamthunder Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in marcusjansen Live Sports Streamthunder allows Cross Site Request Forgery. This issue affects Live Sports Streamthunder: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/live-sports-streamthunder/vulnerability/wordpress-live-sports-streamthunder-plugin-2-1-cross-site-request-forge
s/plugin/live-sports-streamthunder/vulnerability/wordpress-live-sports-streamthunder-plugin-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49968 State: PUBLISHED Published: 2025-06-20T15:04:21.122Z Last Updated: 2025-06-23T20:57:59.823Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Oganro Products: XML Travel Portal Widget Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Oganro XML Travel Portal Widget allows Cross Site Request Forgery. This issue affects XML Travel Portal Widget: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/oganro-reservation-widget/vulnerability/wordpress-xml-travel-portal-widget-plugin-2-0-cross-site-request-forgery-csrf-vulnerab
-reservation-widget/vulnerability/wordpress-xml-travel-portal-widget-plugin-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49969 State: PUBLISHED Published: 2025-06-20T15:04:20.442Z Last Updated: 2025-06-23T20:57:24.535Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Zara 4 Products: Zara 4 Image Compression Problem Types: CWE-862 Description: Missing Authorization vulnerability in Zara 4 Zara 4 Image Compression allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Zara 4 Image Compression: from n/a through 1.2.17.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/zara-4/vulnerability/wordpress-zara-4-image-compression-plugin-1-2-17-2-broken-access-control-v
atabase/wordpress/plugin/zara-4/vulnerability/wordpress-zara-4-image-compression-plugin-1-2-17-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49970 State: PUBLISHED Published: 2025-06-20T15:04:19.559Z Last Updated: 2025-06-23T20:56:51.530Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: sparklewpthemes Products: Hello FSE Blog Problem Types: CWE-862 Description: Missing Authorization vulnerability in sparklewpthemes Hello FSE Blog allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hello FSE Blog: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/hello-fse-blog/vulnerability/wordpress-hello-fse-blog-theme-1-0-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49971 State: PUBLISHED Published: 2025-06-20T15:04:18.787Z Last Updated: 2025-06-23T20:56:17.040Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: aThemeArt Translations Products: eDS Responsive Menu Problem Types: CWE-862 Description: Missing Authorization vulnerability in aThemeArt Translations eDS Responsive Menu allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects eDS Responsive Menu: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/eds-responsive-menu/vulnerability/wordpress-eds-responsive-menu-plugin-1-2-broken-a
hstack.com/database/wordpress/plugin/eds-responsive-menu/vulnerability/wordpress-eds-responsive-menu-plugin-1-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49972 State: PUBLISHED Published: 2025-06-20T15:04:17.977Z Last Updated: 2025-06-23T20:55:41.517Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: David Wood Products: TM Replace Howdy Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in David Wood TM Replace Howdy allows Cross Site Request Forgery. This issue affects TM Replace Howdy: from n/a through 1.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/tm-replace-howdy/vulnerability/wordpress-tm-replace-howdy-plugin-1-4-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49973 State: PUBLISHED Published: 2025-06-20T15:04:17.133Z Last Updated: 2025-06-23T20:55:04.404Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: GrandPlugins Products: Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes Problem Types: CWE-862 Description: Missing Authorization vulnerability in GrandPlugins Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes: from n/a through 1.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
Image Sizes, Disable Image Sizes: from n/a through 1.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/image-sizes-controller/vulnerability/wordpress-image-sizes-controller-create-custom-image-sizes-disable-image-sizes-plugin-1-0-9-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49974 State: PUBLISHED Published: 2025-06-20T15:04:16.551Z Last Updated: 2025-06-23T20:54:17.917Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: upstreamplugin Products: UpStream: a Project Management Plugin for WordPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in upstreamplugin UpStream: a Project Management Plugin for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects UpStream: a Project Management Plugin for WordPress: from n/a through 2.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/u
1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/upstream/vulnerability/wordpress-upstream-a-project-management-plugin-for-wordpress-plugin-2-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49975 State: PUBLISHED Published: 2025-06-20T15:04:15.963Z Last Updated: 2025-06-23T20:53:39.963Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Hossni Mubarak Products: JobWP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP allows Cross Site Request Forgery. This issue affects JobWP: from n/a through 2.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/jobwp/vulnerability/wordpress-jobwp-plugin-2-4-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49976 State: PUBLISHED Published: 2025-06-20T15:04:15.254Z Last Updated: 2025-06-23T20:52:53.831Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: WANotifier Products: WANotifier Problem Types: CWE-862 Description: Missing Authorization vulnerability in WANotifier WANotifier allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WANotifier: from n/a through 2.7.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/notifier/vulnerability/wordpress-wanotifier-plugin-2-7-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49977 State: PUBLISHED Published: 2025-06-20T15:04:14.644Z Last Updated: 2025-06-23T20:52:17.073Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WP Inventory Products: WP Inventory Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Inventory WP Inventory Manager allows Cross Site Request Forgery. This issue affects WP Inventory Manager: from n/a through 2.3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-inventory-manager/vulnerability/wordpress-wp-inventory-manager-plugin-2-3-4-cross-site-request-forgery-csrf-vulnerability
nventory-manager/vulnerability/wordpress-wp-inventory-manager-plugin-2-3-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49978 State: PUBLISHED Published: 2025-06-20T15:04:14.183Z Last Updated: 2025-06-23T20:51:40.835Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: eyecix Products: JobSearch Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in eyecix JobSearch allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobSearch: from n/a through 2.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-jobsearch/vulnerability/wordpress-jobsearch-plugin-2-9-0-insecure-direct-object-references-idor-vulnerability?_s_
gin/wp-jobsearch/vulnerability/wordpress-jobsearch-plugin-2-9-0-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE ID: CVE-2025-49979 State: PUBLISHED Published: 2025-06-20T15:04:13.690Z Last Updated: 2025-06-23T20:51:04.598Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: slui Products: Media Hygiene Problem Types: CWE-862 Description: Missing Authorization vulnerability in slui Media Hygiene allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Hygiene: from n/a through 4.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/media-hygiene/vulnerability/wordpress-media-hygiene-plugin-4-0-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49980 State: PUBLISHED Published: 2025-06-20T15:04:13.169Z Last Updated: 2025-06-23T20:50:24.960Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: WP Event Manager Products: WP User Profile Avatar Problem Types: CWE-862 Description: Missing Authorization vulnerability in WP Event Manager WP User Profile Avatar allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP User Profile Avatar: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-user-profile-avatar/vulnerability/wordpress-wp-user-profile-avatar-plugin-1-0-6-b
stack.com/database/wordpress/plugin/wp-user-profile-avatar/vulnerability/wordpress-wp-user-profile-avatar-plugin-1-0-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49981 State: PUBLISHED Published: 2025-06-20T15:04:12.611Z Last Updated: 2025-06-23T20:49:52.293Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: mahabub81 Products: User Roles and Capabilities Problem Types: CWE-862 Description: Missing Authorization vulnerability in mahabub81 User Roles and Capabilities allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects User Roles and Capabilities: from n/a through 1.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/user-roles-and-capabilities/vulnerability/wordpress-user-roles-and-capabilities-plu
hstack.com/database/wordpress/plugin/user-roles-and-capabilities/vulnerability/wordpress-user-roles-and-capabilities-plugin-1-2-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49982 State: PUBLISHED Published: 2025-06-20T15:04:12.125Z Last Updated: 2025-06-20T17:53:40.549Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: aguilatechnologies Products: WP Customer Area Problem Types: CWE-862 Description: Missing Authorization vulnerability in aguilatechnologies WP Customer Area allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Customer Area: from n/a through 8.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/customer-area/vulnerability/wordpress-wp-customer-area-plugin-8-2-5-broken-access-control-vulnerab
base/wordpress/plugin/customer-area/vulnerability/wordpress-wp-customer-area-plugin-8-2-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49983 State: PUBLISHED Published: 2025-06-20T15:04:11.656Z Last Updated: 2025-06-23T16:18:44.237Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Joe Hoyle Products: WPThumb Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Joe Hoyle WPThumb allows Server Side Request Forgery. This issue affects WPThumb: from n/a through 0.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-thumb/vulnerability/wordpress-wpthumb-plugin-0-10-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49984 State: PUBLISHED Published: 2025-06-20T15:04:11.150Z Last Updated: 2025-06-23T16:18:50.745Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Angelo Mandato Products: PowerPress Podcasting Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Angelo Mandato PowerPress Podcasting allows Server Side Request Forgery. This issue affects PowerPress Podcasting: from n/a through 11.12.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/powerpress/vulnerability/wordpress-powerpress-podcasting-plugin-11-12-11-server-side-request-forgery-ssrf-vulner
/plugin/powerpress/vulnerability/wordpress-powerpress-podcasting-plugin-11-12-11-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49985 State: PUBLISHED Published: 2025-06-20T15:04:10.673Z Last Updated: 2025-06-23T16:18:56.767Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Ali Irani Products: Auto Upload Images Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Ali Irani Auto Upload Images allows Server Side Request Forgery. This issue affects Auto Upload Images: from n/a through 3.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/auto-upload-images/vulnerability/wordpress-auto-upload-images-plugin-3-3-2-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49986 State: PUBLISHED Published: 2025-06-20T15:04:10.215Z Last Updated: 2025-06-23T16:19:02.846Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: thanhtungtnt Products: Video List Manager Problem Types: CWE-862 Description: Missing Authorization vulnerability in thanhtungtnt Video List Manager allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Video List Manager: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/video-list-manager/vulnerability/wordpress-video-list-manager-plugin-1-7-broken-access-control-vulnerability?_s_id
lugin/video-list-manager/vulnerability/wordpress-video-list-manager-plugin-1-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49987 State: PUBLISHED Published: 2025-06-20T15:04:09.700Z Last Updated: 2025-06-23T16:19:09.599Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: WPFactory Products: CRM ERP Business Solution Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPFactory CRM ERP Business Solution allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CRM ERP Business Solution: from n/a through 1.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/crm-erp-business-solution/vulnerability/wordpress-crm-erp-business-solution-plugin-1-13-br
com/database/wordpress/plugin/crm-erp-business-solution/vulnerability/wordpress-crm-erp-business-solution-plugin-1-13-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49988 State: PUBLISHED Published: 2025-06-20T15:04:09.192Z Last Updated: 2025-06-23T17:14:56.711Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Renzo Products: Contact Form 7 AWeber Extension Problem Types: CWE-862 Description: Missing Authorization vulnerability in Renzo Contact Form 7 AWeber Extension allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Contact Form 7 AWeber Extension: from n/a through 0.1.38. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/integrate-contact-form-7-and-aweber/vulnerability/wordpress-contact-form-7-awe
/patchstack.com/database/wordpress/plugin/integrate-contact-form-7-and-aweber/vulnerability/wordpress-contact-form-7-aweber-extension-plugin-0-1-38-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49989 State: PUBLISHED Published: 2025-06-20T15:04:08.696Z Last Updated: 2025-06-23T17:15:13.390Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: App Cheap Products: App Builder Problem Types: CWE-862 Description: Missing Authorization vulnerability in App Cheap App Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects App Builder: from n/a through 5.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/app-builder/vulnerability/wordpress-app-builder-plugin-5-5-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49990 State: PUBLISHED Published: 2025-06-20T15:04:08.230Z Last Updated: 2025-06-23T17:15:30.131Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: contentstudio Products: ContentStudio Problem Types: CWE-862 Description: Missing Authorization vulnerability in contentstudio ContentStudio allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects ContentStudio: from n/a through 1.3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/contentstudio/vulnerability/wordpress-contentstudio-plugin-1-3-4-broken-access-control-vulnerability?_s_id=cve