Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-22267 State: PUBLISHED Published: 2025-01-21T17:21:50.760Z Last Updated: 2025-01-21T18:42:54.698Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Bruce Wampler Products: Weaver Themes Shortcode Compatibility Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bruce Wampler Weaver Themes Shortcode Compatibility allows Stored XSS. This issue affects Weaver Themes Shortcode Compatibility: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/weaver-themes-shortcode-compatibility
A ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/weaver-themes-shortcode-compatibility/vulnerability/wordpress-weaver-themes-shortcode-compatibility-plugin-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22268 State: PUBLISHED Published: 2025-04-15T21:53:09.632Z Last Updated: 2025-04-16T15:07:21.433Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Uncanny Owl Products: Uncanny Toolkit for LearnDash Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash allows Stored XSS. This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.7.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/uncanny-learndash-toolkit/vulnerability/wordpress-uncanny-toolk
nces: - https://patchstack.com/database/wordpress/plugin/uncanny-learndash-toolkit/vulnerability/wordpress-uncanny-toolkit-for-learndash-plugin-3-7-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22269 State: PUBLISHED Published: 2025-04-15T21:53:09.816Z Last Updated: 2025-04-16T15:07:11.133Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: ShapedPlugin LLC Products: Real Testimonials Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShapedPlugin LLC Real Testimonials allows Stored XSS. This issue affects Real Testimonials: from n/a through 3.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/testimonial-free/vulnerability/wordpress-real-testimonials-plugin-3-1-6-cross-site-scriptin
om/database/wordpress/plugin/testimonial-free/vulnerability/wordpress-real-testimonials-plugin-3-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22270 State: PUBLISHED Published: 2025-02-28T12:32:33.243Z Last Updated: 2025-03-05T15:48:53.149Z Vendors: CyberArk Products: Endpoint Privilege Manager Problem Types: CWE-79 Description: An attacker with access to the Administration panel, specifically the "Role Management" tab, can inject code by adding a new role in the "name" field. It should be noted, however, that the risk of exploiting vulnerability is reduced due to the required additional error that allows bypassing the Content-Security-Policy policy, which mitigates JS code execution while still allowing HTML injection. This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of oth
llowing HTML injection. This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/02/CVE-2025-22270/ - https://cert.pl/posts/2025/02/CVE-2025-22270/ - https://docs.cyberark.com/epm/24.7.1/en/content/resources/_topnav/cc_home.htm
CVE ID: CVE-2025-22271 State: PUBLISHED Published: 2025-02-28T12:32:55.955Z Last Updated: 2025-03-05T15:49:31.652Z Vendors: CyberArk Products: Endpoint Privilege Manager Problem Types: CWE-290 Description: The application or its infrastructure allows for IP address spoofing by providing its own value in the "X-Forwarded-For" header. Thus, the action logging mechanism in the application loses accountability This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/202
id not receive any answer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/02/CVE-2025-22270/ - https://cert.pl/posts/2025/02/CVE-2025-22270/ - https://docs.cyberark.com/epm/24.7.1/en/content/resources/_topnav/cc_home.htm
CVE ID: CVE-2025-22272 State: PUBLISHED Published: 2025-02-28T12:33:25.143Z Last Updated: 2025-03-05T15:53:02.771Z Vendors: CyberArk Products: Endpoint Privilege Manager Problem Types: CWE-79 Description: In the "/EPMUI/ModalDlgHandler.ashx?value=showReadonlyDlg" endpoint, it is possible to inject code in the "modalDlgMsgInternal" parameter via POST, which is then executed in the browser. The risk of exploiting vulnerability is reduced due to the required additional bypassing the Content-Security-Policy policy This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive
ersion 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/02/CVE-2025-22270/ - https://cert.pl/posts/2025/02/CVE-2025-22270/ - https://docs.cyberark.com/epm/24.7.1/en/content/resources/_topnav/cc_home.htm
CVE ID: CVE-2025-22273 State: PUBLISHED Published: 2025-02-28T12:33:41.107Z Last Updated: 2025-03-05T15:53:23.083Z Vendors: CyberArk Products: Endpoint Privilege Manager Problem Types: CWE-770 Description: Application does not limit the number or frequency of user interactions, such as the number of incoming requests. At the "/EPMUI/VfManager.asmx/ChangePassword" endpoint it is possible to perform a brute force attack on the current password in use. This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer. Additional Analyst Notes: - CISA ADP Vulnrichment
multiple attempts to contact the vendor we did not receive any answer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/02/CVE-2025-22270/ - https://cert.pl/posts/2025/02/CVE-2025-22270/ - https://docs.cyberark.com/epm/24.7.1/en/content/resources/_topnav/cc_home.htm
CVE ID: CVE-2025-22274 State: PUBLISHED Published: 2025-02-28T12:34:08.548Z Last Updated: 2025-03-12T19:50:46.032Z Vendors: CyberArk Products: Endpoint Privilege Manager Problem Types: CWE-80 Description: It is possible to inject HTML code into the page content using the "content" field in the "Application definition" page. This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/02/CVE-2025-22270/ - https://cert.pl/posts/2025/02/CVE-2025-22270/ - https://docs.
nces: - https://cert.pl/en/posts/2025/02/CVE-2025-22270/ - https://cert.pl/posts/2025/02/CVE-2025-22270/ - https://docs.cyberark.com/epm/24.7.1/en/content/resources/_topnav/cc_home.htm
CVE ID: CVE-2025-22275 State: PUBLISHED Published: 2025-01-03T00:00:00 Last Updated: 2025-01-03T14:58:54.733Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: iTerm2 Products: iTerm2 Problem Types: CWE-532 Description: iTerm2 3.5.6 through 3.5.10 before 3.5.11 sometimes allows remote attackers to obtain sensitive information from terminal commands by reading the /tmp/framer.txt file. This can occur for certain it2ssh and SSH Integration configurations, during remote logins to hosts that have a common Python installation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iterm2.com/downloads/stable/iTerm2-3_5_11.changelog - https://new
Notes: - CISA ADP Vulnrichment: References: - https://iterm2.com/downloads/stable/iTerm2-3_5_11.changelog - https://news.ycombinator.com/item?id=42579472 - https://gitlab.com/gnachman/iterm2/-/wikis/SSH-Integration-Information-Leak
CVE ID: CVE-2025-22276 State: PUBLISHED Published: 2025-01-21T17:21:50.948Z Last Updated: 2025-01-21T18:42:47.095Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Enguerran Weiss Products: Related Post Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Enguerran Weiss Related Post Shortcode allows Stored XSS. This issue affects Related Post Shortcode: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/related-post-shortcode/vulnerability/wordpress-related-post-shortcode-plugin-1-2
atchstack.com/database/wordpress/plugin/related-post-shortcode/vulnerability/wordpress-related-post-shortcode-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22277 State: PUBLISHED Published: 2025-04-01T05:32:24.249Z Last Updated: 2025-04-01T13:36:09.554Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: appsbd Products: Vitepos Problem Types: CWE-288 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos allows Authentication Abuse. This issue affects Vitepos: from n/a through 3.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/vitepos-lite/vulnerability/wordpress-vitepos-plugin-3-1-4-broken-authentication-vulnerability?_s_id=cve
CVE ID: CVE-2025-22278 State: PUBLISHED Published: 2025-03-27T15:33:53.129Z Last Updated: 2025-03-27T16:00:08.753Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: yudleethemes Products: Whitish Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yudleethemes Whitish Lite allows Stored XSS.This issue affects Whitish Lite: from n/a through 2.1.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/whitish-lite/vulnerability/wordpress-whitish-lite-theme-2-1-13-stored-cross-site-scripting-xss-vulnerability?_s_id=
heme/whitish-lite/vulnerability/wordpress-whitish-lite-theme-2-1-13-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22279 State: PUBLISHED Published: 2025-04-10T08:58:57.947Z Last Updated: 2025-04-10T15:11:26.952Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Crocoblock Products: JetCompareWishlist Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Crocoblock JetCompareWishlist allows PHP Local File Inclusion.This issue affects JetCompareWishlist: from n/a through 1.5.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/jet-compare-wishlist/vulnerability/wordpress-jetcomparewishlist-plugin
https://patchstack.com/database/wordpress/plugin/jet-compare-wishlist/vulnerability/wordpress-jetcomparewishlist-plugin-1-5-9-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-22280 State: PUBLISHED Published: 2025-02-27T14:04:08.179Z Last Updated: 2025-02-27T14:22:07.432Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: revmakx Products: DefendWP Firewall Problem Types: CWE-862 Description: Missing Authorization vulnerability in revmakx DefendWP Firewall allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DefendWP Firewall: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/defend-wp-firewall/vulnerability/wordpress-defendwp-firewall-plugin-1-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-22281 State: PUBLISHED Published: 2025-04-04T13:52:32.086Z Last Updated: 2025-04-04T14:01:11.797Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: joshix Products: Simplish Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in joshix Simplish allows Stored XSS.This issue affects Simplish: from n/a through 2.6.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/simplish/vulnerability/wordpress-simplish-theme-2-6-4-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22282 State: PUBLISHED Published: 2025-04-04T10:43:12.176Z Last Updated: 2025-04-04T11:56:39.113Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: EPC Products: ez Form Calculator - WordPress plugin Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EPC ez Form Calculator - WordPress plugin allows Reflected XSS.This issue affects ez Form Calculator - WordPress plugin: from n/a through 2.14.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ez-form-calculator-premium/vulnerability/wordpress-ez-
t: References: - https://patchstack.com/database/wordpress/plugin/ez-form-calculator-premium/vulnerability/wordpress-ez-form-calculator-wordpress-plugin-plugin-2-14-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22283 State: PUBLISHED Published: 2025-03-26T14:24:13.279Z Last Updated: 2025-03-26T15:48:36.633Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Riyaz Products: GetSocial Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Riyaz GetSocial allows Reflected XSS. This issue affects GetSocial: from n/a through 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/getsocial/vulnerability/wordpress-getsocial-plugin-2-0-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22284 State: PUBLISHED Published: 2025-02-16T22:17:16.275Z Last Updated: 2025-02-18T19:35:21.140Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: enituretechnology Products: LTL Freight Quotes – Unishippers Edition Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition allows Reflected XSS. This issue affects LTL Freight Quotes – Unishippers Edition: from n/a through 2.5.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ltl-freight-quotes-
alyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ltl-freight-quotes-unishippers-edition/vulnerability/wordpress-ltl-freight-quotes-unishippers-edition-plugin-2-5-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22285 State: PUBLISHED Published: 2025-04-04T13:53:34.223Z Last Updated: 2025-04-04T14:30:37.774Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Eniture Technology Products: Pallet Packaging for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Eniture Technology Pallet Packaging for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pallet Packaging for WooCommerce: from n/a through 1.1.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pallet-packaging-for-woocommerce/vulnerability/wor
hment: References: - https://patchstack.com/database/wordpress/plugin/pallet-packaging-for-woocommerce/vulnerability/wordpress-pallet-packaging-for-woocommerce-plugin-1-1-15-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-22286 State: PUBLISHED Published: 2025-02-16T22:17:16.594Z Last Updated: 2025-02-18T19:35:10.590Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: enituretechnology Products: LTL Freight Quotes – Worldwide Express Edition Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition allows Reflected XSS. This issue affects LTL Freight Quotes – Worldwide Express Edition: from n/a through 5.0.21. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/
0.21. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ltl-freight-quotes-worldwide-express-edition/vulnerability/wordpress-ltl-freight-quotes-worldwide-express-edition-plugin-5-0-21-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22287 State: PUBLISHED Published: 2025-05-19T17:56:54.085Z Last Updated: 2025-05-20T13:10:32.166Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Eniture Technology Products: LTL Freight Quotes – FreightQuote Edition Problem Types: CWE-862 Description: Missing Authorization vulnerability in Eniture Technology LTL Freight Quotes – FreightQuote Edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – FreightQuote Edition: from n/a through 2.3.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ltl-freight-quotes-frei
t Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ltl-freight-quotes-freightquote-edition/vulnerability/wordpress-ltl-freight-quotes-freightquote-edition-plugin-2-3-11-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-22288 State: PUBLISHED Published: 2025-11-06T15:53:18.126Z Last Updated: 2025-11-13T10:33:39.435Z Vendors: WPMU DEV - Your All-in-One WordPress Platform Products: Smush Image Compression and Optimization Problem Types: CWE-35 Description: Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through <= 3.17.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-smushit/vulnerability/wordpress-smush-image-compression-and-optimizat
://vdp.patchstack.com/database/Wordpress/Plugin/wp-smushit/vulnerability/wordpress-smush-image-compression-and-optimization-plugin-3-17-0-directory-traversal-vulnerability?_s_id=cve
CVE ID: CVE-2025-22289 State: PUBLISHED Published: 2025-02-16T22:17:16.765Z Last Updated: 2025-02-18T16:10:09.185Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: NotFound Products: LTL Freight Quotes – Unishippers Edition Problem Types: CWE-862 Description: Missing Authorization vulnerability in NotFound LTL Freight Quotes – Unishippers Edition allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects LTL Freight Quotes – Unishippers Edition: from n/a through 2.5.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ltl-freight-quotes-unishippers-edition/vulnera
nrichment: References: - https://patchstack.com/database/wordpress/plugin/ltl-freight-quotes-unishippers-edition/vulnerability/wordpress-ltl-freight-quotes-unishippers-edition-plugin-2-5-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-22290 State: PUBLISHED Published: 2025-02-16T22:17:16.905Z Last Updated: 2025-02-18T16:09:52.836Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: enituretechnology Products: LTL Freight Quotes – FreightQuote Edition Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition allows SQL Injection. This issue affects LTL Freight Quotes – FreightQuote Edition: from n/a through 2.3.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ltl-freight
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ltl-freight-quotes-freightquote-edition/vulnerability/wordpress-ltl-freight-quotes-freightquote-edition-plugin-2-3-11-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-22291 State: PUBLISHED Published: 2025-02-16T22:17:17.039Z Last Updated: 2025-02-18T16:09:32.431Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: enituretechnology Products: LTL Freight Quotes – Worldwide Express Edition Problem Types: CWE-862 Description: Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects LTL Freight Quotes – Worldwide Express Edition: from n/a through 5.0.20. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ltl-freig
itional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ltl-freight-quotes-worldwide-express-edition/vulnerability/wordpress-ltl-freight-quotes-worldwide-express-edition-plugin-5-0-20-arbitrary-content-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-22292 State: PUBLISHED Published: 2025-02-03T14:23:50.628Z Last Updated: 2025-02-03T15:44:45.279Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Felipe Peixoto Products: Powerful Auto Chat Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Felipe Peixoto Powerful Auto Chat allows Stored XSS. This issue affects Powerful Auto Chat: from n/a through 1.9.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/powers-triggers-of-woo-to-chat/vulnerability/wordpress-powerful-auto-chat-plugin-1-9-8-cross
m/database/wordpress/plugin/powers-triggers-of-woo-to-chat/vulnerability/wordpress-powerful-auto-chat-plugin-1-9-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-22293 State: PUBLISHED Published: 2025-01-07T10:49:05.659Z Last Updated: 2025-01-07T16:06:45.413Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Gutentor Products: Gutentor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gutentor Gutentor allows DOM-Based XSS.This issue affects Gutentor: from n/a through 3.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gutentor/vulnerability/wordpress-gutentor-plugin-3-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve