Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
and Conditions Popup for User Login and WooCommerce Checkout – TPUL: from n/a through 2.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/terms-popup-on-user-login/vulnerability/wordpress-legal-terms-and-conditions-popup-for-user-login-and-woocommerce-checkout-tpul-2-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47593 State: PUBLISHED Published: 2025-05-07T14:20:24.383Z Last Updated: 2025-05-07T18:14:30.164Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Jonas Hjalmarsson Products: Really Simple Under Construction Page Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jonas Hjalmarsson Really Simple Under Construction Page allows Stored XSS. This issue affects Really Simple Under Construction Page: from n/a through 1.4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/really-simple-under-construct
s: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/really-simple-under-construction/vulnerability/wordpress-really-simple-under-construction-page-1-4-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47594 State: PUBLISHED Published: 2025-05-07T14:20:24.977Z Last Updated: 2025-05-07T18:14:18.853Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: DAEXT Products: Soccer Live Scores Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in DAEXT Soccer Live Scores allows Cross Site Request Forgery. This issue affects Soccer Live Scores: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/soccer-live-scores/vulnerability/wordpress-soccer-live-scores-1-0-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-47595 State: PUBLISHED Published: 2025-05-07T14:20:25.531Z Last Updated: 2025-05-07T18:14:07.445Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Darshan Saroya Products: Color Your Bar Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Darshan Saroya Color Your Bar allows Stored XSS. This issue affects Color Your Bar: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/color-your-bar/vulnerability/wordpress-color-your-bar-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47596 State: PUBLISHED Published: 2025-05-07T14:20:26.061Z Last Updated: 2025-05-07T18:13:55.295Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Syed Balkhi Products: Beacon Lead Magnets and Lead Capture Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Beacon Lead Magnets and Lead Capture allows Cross Site Request Forgery. This issue affects Beacon Lead Magnets and Lead Capture: from n/a through 1.5.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/beacon-by/vulnerability/wordpress-beacon-lead-magnets-and-lead-capture-1-5-8-c
/patchstack.com/database/wordpress/plugin/beacon-by/vulnerability/wordpress-beacon-lead-magnets-and-lead-capture-1-5-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-47597 State: PUBLISHED Published: 2025-05-07T14:20:26.591Z Last Updated: 2025-05-07T18:13:43.860Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Maulik Vora Products: WP Podcasts Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Maulik Vora WP Podcasts Manager allows Cross Site Request Forgery. This issue affects WP Podcasts Manager: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-podcasts-manager/vulnerability/wordpress-wp-podcasts-manager-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-47598 State: PUBLISHED Published: 2025-06-09T15:54:08.578Z Last Updated: 2025-06-09T17:23:20.673Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: click5 Products: History Log by click5 Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in click5 History Log by click5 allows Stored XSS. This issue affects History Log by click5: from n/a through 1.0.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/history-log-by-click5/vulnerability/wordpress-history-log-by-click5-1-0-13-cross-site-scripting-xs
base/wordpress/plugin/history-log-by-click5/vulnerability/wordpress-history-log-by-click5-1-0-13-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47599 State: PUBLISHED Published: 2025-05-23T12:43:29.064Z Last Updated: 2025-05-23T15:21:38.594Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: facturante Products: Facturante Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in facturante Facturante allows SQL Injection. This issue affects Facturante: from n/a through 1.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/facturante/vulnerability/wordpress-facturante-1-11-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-47601 State: PUBLISHED Published: 2025-06-07T04:37:52.987Z Last Updated: 2025-06-09T15:08:53.619Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Christiaan Pieterse Products: MaxiBlocks Problem Types: CWE-862 Description: Missing Authorization vulnerability in Christiaan Pieterse MaxiBlocks allows Privilege Escalation.This issue affects MaxiBlocks: from n/a through 2.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/maxi-blocks/vulnerability/wordpress-maxiblocks-plugin-2-1-0-arbitrary-option-update-to-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-47602 State: PUBLISHED Published: 2025-05-07T14:20:27.128Z Last Updated: 2025-05-07T18:13:32.625Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: ammarahmad786 Products: Calculate Prices based on Distance For WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in ammarahmad786 Calculate Prices based on Distance For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Calculate Prices based on Distance For WooCommerce: from n/a through 1.3.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/calcul
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/calculate-prices-based-on-distance-for-woocommerce/vulnerability/wordpress-calculate-prices-based-on-distance-for-woocommerce-1-3-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-47603 State: PUBLISHED Published: 2025-05-23T12:43:28.598Z Last Updated: 2025-05-23T15:22:06.245Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Belingo Products: belingoGeo Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Belingo belingoGeo allows Path Traversal. This issue affects belingoGeo: from n/a through 1.12.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/belingogeo/vulnerability/wordpress-belingogeo-1-12-0-arbitrary-file-download-vulnerability?_s_id=cve
CVE ID: CVE-2025-47604 State: PUBLISHED Published: 2025-05-07T14:20:27.635Z Last Updated: 2025-05-07T18:13:20.493Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Data443 Risk Migitation, Inc. Products: Inline Related Posts Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Risk Migitation, Inc. Inline Related Posts allows Stored XSS. This issue affects Inline Related Posts: from n/a through 3.8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/intelly-related-posts/vulnerability/wordpress-inline-rel
References: - https://patchstack.com/database/wordpress/plugin/intelly-related-posts/vulnerability/wordpress-inline-related-posts-3-8-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47605 State: PUBLISHED Published: 2025-05-07T14:20:28.164Z Last Updated: 2025-05-07T18:13:09.716Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: AppJetty Products: WP jQuery DataTable Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AppJetty WP jQuery DataTable allows Stored XSS. This issue affects WP jQuery DataTable: from n/a through 4.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-jquery-datatable/vulnerability/wordpress-wp-jquery-datatable-4-1-0-cross-site-scripting-xss-vulner
e/wordpress/plugin/wp-jquery-datatable/vulnerability/wordpress-wp-jquery-datatable-4-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47606 State: PUBLISHED Published: 2025-05-07T14:20:28.694Z Last Updated: 2025-05-07T18:12:59.352Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Igor Benic Products: Simple Giveaways Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Igor Benic Simple Giveaways allows Cross Site Request Forgery. This issue affects Simple Giveaways: from n/a through 2.48.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/giveasap/vulnerability/wordpress-simple-giveaways-2-48-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-47607 State: PUBLISHED Published: 2025-05-07T14:20:29.234Z Last Updated: 2025-05-08T16:15:39.194Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: AppJetty Products: Show All Comments Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AppJetty Show All Comments allows Stored XSS. This issue affects Show All Comments: from n/a through 7.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/show-all-comments-in-one-page/vulnerability/wordpress-show-all-comments-7-0-1-cross-site-scripting-xss-vuln
press/plugin/show-all-comments-in-one-page/vulnerability/wordpress-show-all-comments-7-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47608 State: PUBLISHED Published: 2025-06-09T15:54:07.876Z Last Updated: 2025-06-09T17:23:26.523Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: sonalsinha21 Products: Recover abandoned cart for WooCommerce Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce allows SQL Injection. This issue affects Recover abandoned cart for WooCommerce: from n/a through 2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/recover-wc-abandoned-cart/vulnera
CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/recover-wc-abandoned-cart/vulnerability/wordpress-recover-abandoned-cart-for-woocommerce-2-5-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-47609 State: PUBLISHED Published: 2025-05-07T14:20:29.775Z Last Updated: 2025-05-08T16:15:14.300Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: easymebiz Products: EasyMe Connect Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in easymebiz EasyMe Connect allows Cross Site Request Forgery. This issue affects EasyMe Connect: from n/a through 3.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easyme-connect/vulnerability/wordpress-easyme-connect-3-0-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-47610 State: PUBLISHED Published: 2025-08-14T10:34:24.864Z Last Updated: 2025-08-14T14:42:35.259Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Wetail Products: WooCommerce Fortnox Integration Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wetail WooCommerce Fortnox Integration allows Stored XSS. This issue affects WooCommerce Fortnox Integration: from n/a through 4.5.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-fortnox-integration/vulnerability/wordpress-woocommerce-f
- https://patchstack.com/database/wordpress/plugin/woocommerce-fortnox-integration/vulnerability/wordpress-woocommerce-fortnox-integration-4-5-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47611 State: PUBLISHED Published: 2025-05-23T12:43:28.136Z Last Updated: 2025-05-23T15:22:56.210Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Khaled Products: User Meta Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Khaled User Meta allows Reflected XSS. This issue affects User Meta: from n/a through 3.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/user-meta/vulnerability/wordpress-user-meta-plugin-3-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47612 State: PUBLISHED Published: 2025-05-07T14:20:30.323Z Last Updated: 2025-05-08T16:14:44.030Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: flowdee Products: ClickWhale Problem Types: CWE-862 Description: Missing Authorization vulnerability in flowdee ClickWhale allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ClickWhale: from n/a through 2.4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/clickwhale/vulnerability/wordpress-clickwhale-2-4-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-47613 State: PUBLISHED Published: 2025-05-23T12:43:27.686Z Last Updated: 2025-05-23T15:23:21.729Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: mojoomla Products: School Management Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/school-management/vulnerability/wordpress-school-management-system-for-wordpress-plugin-92-0-0-reflected-
rdpress/plugin/school-management/vulnerability/wordpress-school-management-system-for-wordpress-plugin-92-0-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47614 State: PUBLISHED Published: 2025-05-07T14:20:30.890Z Last Updated: 2025-05-08T16:14:09.879Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Chris Clark Products: LessButtons Social Sharing and Statistics Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Chris Clark LessButtons Social Sharing and Statistics allows Cross Site Request Forgery. This issue affects LessButtons Social Sharing and Statistics: from n/a through 1.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/lessbuttons/vulnerability/wordpress-lessbuttons-social-sharing-
nces: - https://patchstack.com/database/wordpress/plugin/lessbuttons/vulnerability/wordpress-lessbuttons-social-sharing-and-statistics-plugin-1-6-1-cross-site-request-forgery-csrf-to-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-47615 State: PUBLISHED Published: 2025-05-07T14:20:31.427Z Last Updated: 2025-05-07T18:12:49.119Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: flowdee Products: Amazon Product in a Post Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flowdee Amazon Product in a Post allows Stored XSS. This issue affects Amazon Product in a Post: from n/a through 5.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/amazon-product-in-a-post-plugin/vulnerability/wordpress-amazon-product-in-a-post-5-2-2-c
k.com/database/wordpress/plugin/amazon-product-in-a-post-plugin/vulnerability/wordpress-amazon-product-in-a-post-5-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47616 State: PUBLISHED Published: 2025-05-07T14:20:32.154Z Last Updated: 2025-06-05T18:19:33.399Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Tushar Imran Products: aBlocks Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tushar Imran aBlocks allows Stored XSS.This issue affects aBlocks: from n/a through 1.9.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ablocks/vulnerability/wordpress-ablocks-1-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47617 State: PUBLISHED Published: 2025-05-07T14:20:32.752Z Last Updated: 2025-05-07T18:12:27.176Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: aharonyan Products: WP Front User Submit / Front Editor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aharonyan WP Front User Submit / Front Editor allows Stored XSS. This issue affects WP Front User Submit / Front Editor: from n/a through 4.9.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/front-editor/vulnerability/wordpress-wp-front-user-
ment: References: - https://patchstack.com/database/wordpress/plugin/front-editor/vulnerability/wordpress-wp-front-user-submit-front-editor-4-9-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47618 State: PUBLISHED Published: 2025-05-23T12:43:27.223Z Last Updated: 2025-05-23T15:23:38.397Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Mortgage Calculator Products: BMI Adult & Kid Calculator Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mortgage Calculator BMI Adult & Kid Calculator allows Reflected XSS. This issue affects BMI Adult & Kid Calculator: from n/a through 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bmi-adultkid-calculator/vulnerability/wordpress-bmi-adult
References: - https://patchstack.com/database/wordpress/plugin/bmi-adultkid-calculator/vulnerability/wordpress-bmi-adult-kid-calculator-plugin-1-2-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47619 State: PUBLISHED Published: 2025-05-23T12:43:26.758Z Last Updated: 2025-05-23T15:23:52.198Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: 6Storage Products: 6Storage Rentals Problem Types: CWE-862 Description: Missing Authorization vulnerability in 6Storage 6Storage Rentals allows Path Traversal. This issue affects 6Storage Rentals: from n/a through 2.19.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/6storage-rentals/vulnerability/wordpress-6storage-rentals-2-19-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-47620 State: PUBLISHED Published: 2025-05-07T14:20:33.416Z Last Updated: 2025-05-07T18:12:15.762Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: bundgaard Products: Martins Free Monetized Ad Exchange Network Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in bundgaard Martins Free Monetized Ad Exchange Network allows Reflected XSS. This issue affects Martins Free Monetized Ad Exchange Network: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/martins-free-and-easy-ad-network-get-more-visitors/vulnerability/wordpress-mart
patchstack.com/database/wordpress/plugin/martins-free-and-easy-ad-network-get-more-visitors/vulnerability/wordpress-martins-free-monetized-ad-exchange-network-plugin-1-0-5-csrf-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47621 State: PUBLISHED Published: 2025-05-07T14:20:33.969Z Last Updated: 2025-05-08T15:37:20.499Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Meks Products: Meks Flexible Shortcodes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Meks Meks Flexible Shortcodes allows Stored XSS. This issue affects Meks Flexible Shortcodes: from n/a through 1.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/meks-flexible-shortcodes/vulnerability/wordpress-meks-flexible-shortcodes-1-3-6-cross-site-scr
database/wordpress/plugin/meks-flexible-shortcodes/vulnerability/wordpress-meks-flexible-shortcodes-1-3-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47622 State: PUBLISHED Published: 2025-05-07T14:20:34.524Z Last Updated: 2025-05-08T15:35:37.060Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: apasionados Products: Email Notification on Login Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in apasionados Email Notification on Login allows Stored XSS. This issue affects Email Notification on Login: from n/a through 1.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/email-notification-on-login/vulnerability/wordpress-email-notification-
https://patchstack.com/database/wordpress/plugin/email-notification-on-login/vulnerability/wordpress-email-notification-on-login-1-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-47623 State: PUBLISHED Published: 2025-05-07T14:20:35.057Z Last Updated: 2025-05-08T15:34:54.363Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Scott Paterson Products: Easy PayPal Buy Now Button Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Paterson Easy PayPal Buy Now Button allows Stored XSS. This issue affects Easy PayPal Buy Now Button: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-ecommerce-paypal/vulnerability/wordpress-easy-paypal-buy-now-button