Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-53374 State: PUBLISHED Published: 2025-07-07T15:52:18.675Z Last Updated: 2025-07-07T16:00:15.266Z Vendors: Dokploy Products: dokploy Problem Types: CWE-359, CWE-862 Description: Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases. An authenticated low-privileged account can retrieve detailed profile information about another users in the same organization by directly invoking user.one. The response discloses personally-identifiable information (PII) such as e-mail address, role, two-factor status, organization ID, and various account flags. The fix will be available in the v0.23.7. Additional Ana
two-factor status, organization ID, and various account flags. The fix will be available in the v0.23.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Dokploy/dokploy/security/advisories/GHSA-fcq8-wv2q-f758 - https://github.com/Dokploy/dokploy/commit/61cf426615a4aa095b150362526aa52f2d1ea115
CVE ID: CVE-2025-53375 State: PUBLISHED Published: 2025-07-07T16:02:03.797Z Last Updated: 2025-07-08T13:50:48.982Z Vendors: Dokploy Products: dokploy Problem Types: CWE-22 Description: Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases. An authenticated attacker can read any file that the Traefik process user can access (e.g., /etc/passwd, application source, environment variable files containing credentials and secrets). This may lead to full compromise of other services or lateral movement. This vulnerability is fixed in 0.23.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.co
his vulnerability is fixed in 0.23.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Dokploy/dokploy/security/advisories/GHSA-vq94-qm94-mxp6 - https://github.com/Dokploy/dokploy/commit/e42f6bc61050cd438726921fced64477cbf8f8e6
CVE ID: CVE-2025-53376 State: PUBLISHED Published: 2025-07-07T15:55:34.637Z Last Updated: 2025-07-07T16:14:22.091Z Vendors: Dokploy Products: dokploy Problem Types: CWE-78 Description: Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases. An authenticated, low-privileged user can run arbitrary OS commands on the Dokploy host. The tRPC procedure docker.getContainersByAppNameMatch interpolates the attacker-supplied appName value into a Docker CLI call without sanitisation, enabling command injection under the Dokploy service account. This vulnerability is fixed in 0.23.7. Additional Analyst Notes: - CISA ADP Vulnric
n under the Dokploy service account. This vulnerability is fixed in 0.23.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Dokploy/dokploy/security/advisories/GHSA-m486-7pmj-8cmv - https://github.com/Dokploy/dokploy/commit/fb5d2bd5b67322f1468e5e4d0d5abcf97517761c
CVE ID: CVE-2025-53377 State: PUBLISHED Published: 2025-07-07T16:19:56.972Z Last Updated: 2025-07-08T13:40:41.252Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-79 Description: WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the cadastro_dependente_pessoa_nova.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the id_funcionario parameter. This vulnerability is fixed in 3.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-qgrq-qjq6-h6gj - https://github.com/LabRedesC
ences: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-qgrq-qjq6-h6gj - https://github.com/LabRedesCefetRJ/WeGIA/commit/8ab726c9f4d0fce7ad6c66640c3126f95f73ddd7
CVE ID: CVE-2025-53378 State: PUBLISHED Published: 2025-07-10T18:58:55.645Z Last Updated: 2025-07-10T19:06:00.457Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Worry-Free Business Security Services Problem Types: CWE-306 Description: A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations. Also note: this vulnerability only affected the SaaS client version of WFBSS only, meaning the on-premise version of Worry-Free Business Security was not affected, and this
client version of WFBSS only, meaning the on-premise version of Worry-Free Business Security was not affected, and this issue was addressed in a WFBSS monthly maintenance update. Therefore no other customer action is required to mitigate if the WFBSS agents are on the regular SaaS maintenance deployment schedule and this disclosure is for informational purposes only. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/en-US/solution/KA-0019936
CVE ID: CVE-2025-53380 State: REJECTED Published: N/A Last Updated: 2025-06-28T02:55:09.109Z Description: No description available.
CVE ID: CVE-2025-53381 State: REJECTED Published: N/A Last Updated: 2025-06-28T02:55:08.669Z Description: No description available.
CVE ID: CVE-2025-53382 State: REJECTED Published: N/A Last Updated: 2025-06-28T02:55:08.231Z Description: No description available.
CVE ID: CVE-2025-53383 State: REJECTED Published: N/A Last Updated: 2025-06-28T02:55:07.703Z Description: No description available.
CVE ID: CVE-2025-53384 State: REJECTED Published: N/A Last Updated: 2025-06-28T02:55:07.246Z Description: No description available.
CVE ID: CVE-2025-53385 State: REJECTED Published: N/A Last Updated: 2025-06-28T02:55:06.782Z Description: No description available.
CVE ID: CVE-2025-53386 State: REJECTED Published: N/A Last Updated: 2025-06-28T02:55:06.295Z Description: No description available.
CVE ID: CVE-2025-53387 State: REJECTED Published: N/A Last Updated: 2025-06-28T02:55:05.826Z Description: No description available.
CVE ID: CVE-2025-53388 State: REJECTED Published: N/A Last Updated: 2025-06-28T02:55:05.324Z Description: No description available.
CVE ID: CVE-2025-53391 State: PUBLISHED Published: 2025-06-28T00:00:00.000Z Last Updated: 2025-06-30T13:32:33.748Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Debian Products: zulucrypt Problem Types: CWE-863 Description: The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package has insecure PolicyKit allow_any/allow_inactive/allow_active settings that allow a local user to escalate their privileges to root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bugs.debian.org/1108288 - https://salsa.debian.org/debian/zulucrypt/-/blob/9d661c9f384c4d889d3387944e14ac70cfb9684b/debian/patches/fix_zulu
8288 - https://salsa.debian.org/debian/zulucrypt/-/blob/9d661c9f384c4d889d3387944e14ac70cfb9684b/debian/patches/fix_zulupolkit_policy.patch - https://deb.debian.org/debian/pool/main/z/zulucrypt/zulucrypt_6.2.0-1.dsc
CVE ID: CVE-2025-53392 State: PUBLISHED Published: 2025-06-28T00:00:00.000Z Last Updated: 2025-06-30T13:32:27.839Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Netgate Products: pfSense Problem Types: CWE-36 Description: In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_command.php dlPath directory traversal. NOTE: the Supplier's perspective is that this is intended behavior for this privilege level, and that system administrators are informed through both the product documentation and UI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/skraft9/pfsense-secur
tation and UI. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/skraft9/pfsense-security-research
CVE ID: CVE-2025-53393 State: PUBLISHED Published: 2025-06-28T00:00:00.000Z Last Updated: 2025-06-30T13:32:20.959Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: Akka Products: Akka Problem Types: CWE-502 Description: In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/akka/akka/pull/32748
CVE ID: CVE-2025-53394 State: PUBLISHED Published: 2025-08-04T00:00:00.000Z Last Updated: 2025-08-05T14:30:31.120Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Paramount Macrium Reflect through 2025-06-26 allows attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx or .mrbax backup file and a renamed executable placed in the same directory. When a user with administrative privileges opens the crafted backup file and proceeds to mount it, Reflect launches the renamed executable (e.g., explorer.exe), which is under attacker control. This occurs because of insufficient validati
e renamed executable (e.g., explorer.exe), which is under attacker control. This occurs because of insufficient validation of companion files referenced during backup mounting. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://macrium.com - https://www.macrium.com/blog/macrium-security-advisory-cve-2025-53394-cve-2025-53395
CVE ID: CVE-2025-53395 State: PUBLISHED Published: 2025-08-04T00:00:00.000Z Last Updated: 2025-08-05T14:29:34.000Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Paramount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx backup file and a malicious VSSSvr.dll located in the same directory. When a user with administrative privileges mounts a backup by opening the .mrimgx file, Reflect loads the attacker's VSSSvr.dll after the mount completes. This occurs because of untrusted DLL search path behavior in ReflectMonitor.exe. Add
SSvr.dll after the mount completes. This occurs because of untrusted DLL search path behavior in ReflectMonitor.exe. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://macrium.com - https://www.macrium.com/blog/macrium-security-advisory-cve-2025-53394-cve-2025-53395
CVE ID: CVE-2025-53396 State: PUBLISHED Published: 2025-08-28T08:27:58.670Z Last Updated: 2025-08-28T14:12:17.628Z Severity: HIGH (CVSS 7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: DOS Co., Ltd. Products: SS1, SS1 Cloud Problem Types: CWE-732 Description: Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier), which may allow users who can log in to a client terminal to obtain root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dos-osaka.co.jp/news/2025/08/250827.html - https://jvn.jp/en/jp/JVN99577552/
CVE ID: CVE-2025-53397 State: PUBLISHED Published: 2025-07-10T23:13:27.593Z Last Updated: 2025-07-11T13:58:21.416Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Advantech Products: iView Problem Types: CWE-79 Description: A vulnerability exists in Advantech iView versions prior to 5.7.05 build 7057, which could allow a reflected cross-site scripting (XSS) attack. By exploiting this flaw, an attacker could execute unauthorized scripts in the user's browser, potentially leading to information disclosure or other malicious activities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-0
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-08 - https://www.advantech.com/en/support/details/firmware-?id=1-HIPU-183
CVE ID: CVE-2025-53399 State: PUBLISHED Published: 2025-08-01T00:00:00.000Z Last Updated: 2025-11-04T22:06:44.119Z Vendors: Sipwise Products: rtpengine Problem Types: CWE-346 Description: In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets (except when the relay is configured for strict source and learning disabled). Version 13.4.1.1 fixes the heuristic mode by limiting exposure to the first five packets, and introduces a recrypt flag that fully prevents SRTP attacks when both mitigations are enabled. Additional Analyst Notes: - CISA ADP Vu
recrypt flag that fully prevents SRTP attacks when both mitigations are enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/sipwise/rtpengine/commits/rfuchs/security/ - https://www.openwall.com/lists/oss-security/2025/07/31/1 - https://github.com/sipwise/rtpengine/releases/tag/mr13.4.1.1 - https://github.com/EnableSecurity/advisories/tree/master/ES2025-01-rtpengine-improper-behavior-bleed-inject
CVE ID: CVE-2025-53406 State: PUBLISHED Published: 2025-10-03T18:14:36.797Z Last Updated: 2025-10-03T19:10:06.668Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-134 Description: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.6.3195 build 20250715 and later QuTS hero h5.2.6.3195 build 20250715 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.c
CVE ID: CVE-2025-53407 State: PUBLISHED Published: 2025-10-03T18:14:42.829Z Last Updated: 2025-10-03T19:09:52.630Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-134 Description: A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.6.3195 build 20250715 and later QuTS hero h5.2.6.3195 build 20250715 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.c
CVE ID: CVE-2025-53408 State: PUBLISHED Published: 2025-11-07T15:15:11.361Z Last Updated: 2025-11-07T15:43:49.566Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-38
CVE ID: CVE-2025-53409 State: PUBLISHED Published: 2025-11-07T15:14:44.914Z Last Updated: 2025-11-07T15:56:12.638Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-770 Description: An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advis
6.5018 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-38
CVE ID: CVE-2025-53410 State: PUBLISHED Published: 2025-11-07T15:14:20.754Z Last Updated: 2025-11-07T15:56:28.129Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-770 Description: An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advis
CVE ID: CVE-2025-53411 State: PUBLISHED Published: 2025-11-07T15:13:57.618Z Last Updated: 2025-11-07T15:56:50.992Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-770 Description: An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/secu
ion 5 5.5.6.5018 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-38
CVE ID: CVE-2025-53412 State: PUBLISHED Published: 2025-11-07T15:13:34.575Z Last Updated: 2025-11-07T15:57:02.038Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-38
CVE ID: CVE-2025-53413 State: PUBLISHED Published: 2025-11-07T15:13:03.060Z Last Updated: 2025-11-07T15:57:08.616Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-770 Description: An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advis
CVE ID: CVE-2025-53415 State: PUBLISHED Published: 2025-06-30T09:09:32.624Z Last Updated: 2025-07-01T07:49:57.750Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DTM Soft Problem Types: CWE-502 Description: Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00009_DTM%20Soft%20and%20DTN%20Soft%20BIN%20File%20Parsing%20Deserialization%20of%20Untrusted%20Data.pdf
CVE ID: CVE-2025-53416 State: PUBLISHED Published: 2025-06-30T09:14:19.717Z Last Updated: 2025-07-15T14:52:28.895Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DTN Soft Problem Types: CWE-502 Description: Delta Electronics DTN Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.deltaww.com/en-US/Cybersecurity_Advisory
CVE ID: CVE-2025-53417 State: PUBLISHED Published: 2025-08-05T02:28:22.839Z Last Updated: 2025-08-05T13:37:21.204Z Vendors: Delta Electronics Products: DIAView Problem Types: CWE-35 Description: DIAView (v4.2.0 and prior) - Directory Traversal Information Disclosure Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00010_DIAView%20Directory%20Traversal%20Information%20Disclosure.pdf
CVE ID: CVE-2025-53418 State: PUBLISHED Published: 2025-08-26T06:54:44.655Z Last Updated: 2025-08-26T19:32:16.868Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Delta Electronics Products: COMMGR Problem Types: CWE-121 Description: Delta Electronics COMMGR has Stack-based Buffer Overflow vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00014_COMMGR%20Stack-based%20Buffer%20Overflow%20and%20Code%20Injection%20Vulnerabilities.pdf
CVE ID: CVE-2025-53419 State: PUBLISHED Published: 2025-08-26T07:02:43.522Z Last Updated: 2025-09-01T06:36:17.376Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: COMMGR Problem Types: CWE-94 Description: Delta Electronics COMMGR has Code Injection vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00014_COMMGR%20Stack-based%20Buffer%20Overflow%20and%20Code%20Injection%20Vulnerabilities.pdf
CVE ID: CVE-2025-53420 State: PUBLISHED Published: 2025-10-22T14:32:32.282Z Last Updated: 2025-11-13T10:33:42.359Z Vendors: VibeThemes Products: WPLMS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes WPLMS wplms_plugin allows Reflected XSS.This issue affects WPLMS: from n/a through <= 1.9.9.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wplms_plugin/vulnerability/wordpress-wplms-plugin-1-9-9-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53421 State: PUBLISHED Published: 2025-10-22T14:32:32.545Z Last Updated: 2025-11-13T10:33:42.371Z Vendors: PickPlugins Products: Accordion Problem Types: CWE-862 Description: Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion: from n/a through <= 2.3.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/accordions/vulnerability/wordpress-accordion-plugin-2-3-14-broken-access-control-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-53422 State: PUBLISHED Published: 2025-10-22T14:32:32.974Z Last Updated: 2025-11-13T10:33:42.356Z Vendors: ThemeWarriors Products: WhatsApp Chat for WordPress and WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeWarriors WhatsApp Chat for WordPress and WooCommerce tw-whatsapp-chat-rotator allows Reflected XSS.This issue affects WhatsApp Chat for WordPress and WooCommerce: from n/a through <= 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/tw-whatsapp-chat-rotator/vulnerability/wordpress-whatsapp-
ences: - https://vdp.patchstack.com/database/Wordpress/Plugin/tw-whatsapp-chat-rotator/vulnerability/wordpress-whatsapp-chat-for-wordpress-and-woocommerce-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53423 State: PUBLISHED Published: 2025-10-22T14:32:33.165Z Last Updated: 2025-11-13T10:33:42.372Z Vendors: designthemes Products: Triss Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes Triss triss allows Reflected XSS.This issue affects Triss: from n/a through <= 2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/triss/vulnerability/wordpress-triss-theme-2-6-cross-site-scripting-xss-vulnerability?_s_id=cve