Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-23944 State: PUBLISHED Published: 2025-01-22T14:29:24.334Z Last Updated: 2025-01-22T15:25:31.387Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: WOOEXIM.COM Products: WOOEXIM Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in WOOEXIM.COM WOOEXIM allows Object Injection. This issue affects WOOEXIM: from n/a through 5.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wooexim/vulnerability/wordpress-wooexim-plugin-5-0-0-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-23945 State: PUBLISHED Published: 2025-03-03T13:30:20.984Z Last Updated: 2025-03-03T19:35:16.430Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NotFound Products: Popliup Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound Popliup allows PHP Local File Inclusion. This issue affects Popliup: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/popliup/vulnerability/wordpress-popliup-plugin-1-1-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-23946 State: PUBLISHED Published: 2025-01-16T20:08:06.007Z Last Updated: 2025-01-17T20:29:42.159Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: le Pixel Solitaire Products: Enhanced YouTube Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in le Pixel Solitaire Enhanced YouTube Shortcode allows Stored XSS.This issue affects Enhanced YouTube Shortcode: from n/a through 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/enhanced-youtube-shortcode/vulnerability/wordpress-enhanced-y
rences: - https://patchstack.com/database/wordpress/plugin/enhanced-youtube-shortcode/vulnerability/wordpress-enhanced-youtube-shortcode-plugin-2-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23947 State: PUBLISHED Published: 2025-01-16T20:08:04.140Z Last Updated: 2025-01-17T21:07:21.449Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: M.J Products: WP-Player Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M.J WP-Player allows Stored XSS.This issue affects WP-Player: from n/a through 2.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-player/vulnerability/wordpress-wp-player-plugin-2-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23948 State: PUBLISHED Published: 2025-01-22T14:29:24.502Z Last Updated: 2025-01-22T15:24:58.850Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: WebArea Products: Background animation blocks Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebArea Background animation blocks allows PHP Local File Inclusion. This issue affects Background animation blocks: from n/a through 2.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/background-animation-blocks/vulnerability/wordpr
ichment: References: - https://patchstack.com/database/wordpress/plugin/background-animation-blocks/vulnerability/wordpress-background-animation-blocks-plugin-2-1-5-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-23949 State: PUBLISHED Published: 2025-01-22T14:29:24.700Z Last Updated: 2025-01-22T15:24:32.432Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Mihajlovic Nenad Products: Improved Sale Badges – Free Version Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mihajlovic Nenad Improved Sale Badges – Free Version allows PHP Local File Inclusion. This issue affects Improved Sale Badges – Free Version: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/improv
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/improved-sale-badges-free-version/vulnerability/wordpress-improved-sale-badges-free-version-plugin-1-0-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-23950 State: PUBLISHED Published: 2025-01-16T20:08:07.340Z Last Updated: 2025-01-17T20:27:48.116Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Said Shiripour Products: EZPlayer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Said Shiripour EZPlayer allows Stored XSS.This issue affects EZPlayer: from n/a through 1.0.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ezplayer/vulnerability/wordpress-ezplayer-plugin-1-0-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23951 State: PUBLISHED Published: 2025-01-16T20:08:04.780Z Last Updated: 2025-01-17T21:05:09.702Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: DivEngine Products: Gallery: Hybrid – Advanced Visual Gallery Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DivEngine Gallery: Hybrid – Advanced Visual Gallery allows Stored XSS.This issue affects Gallery: Hybrid – Advanced Visual Gallery: from n/a through 1.4.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hybrid-gallery/vulnerability/wor
- CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hybrid-gallery/vulnerability/wordpress-gallery-hybrid-advanced-visual-gallery-plugin-1-4-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23952 State: PUBLISHED Published: 2025-03-26T14:24:17.145Z Last Updated: 2025-03-26T15:31:26.985Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ntm Products: custom-field-list-widget Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ntm custom-field-list-widget allows PHP Local File Inclusion. This issue affects custom-field-list-widget: from n/a through 1.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-field-list-widget/vulnerability/wordpress-custom-field-lis
es: - https://patchstack.com/database/wordpress/plugin/custom-field-list-widget/vulnerability/wordpress-custom-field-list-widget-plugin-1-5-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-23953 State: PUBLISHED Published: 2025-01-22T14:29:24.868Z Last Updated: 2025-01-22T15:23:43.849Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Innovative Solutions Products: user files Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Innovative Solutions user files allows Upload a Web Shell to a Web Server. This issue affects user files: from n/a through 2.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/user-files/vulnerability/wordpress-user-files-plugin-2-4-2-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-23954 State: PUBLISHED Published: 2025-01-16T20:08:08.694Z Last Updated: 2025-01-17T20:24:36.547Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: AWcode & KingfisherFox Products: Salvador – AI Image Generator Problem Types: CWE-862 Description: Missing Authorization vulnerability in AWcode & KingfisherFox Salvador – AI Image Generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salvador – AI Image Generator: from n/a through 1.0.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/salvador-ai-image-generator/vulnerability/wordpress
ment: References: - https://patchstack.com/database/wordpress/plugin/salvador-ai-image-generator/vulnerability/wordpress-salvador-ai-image-generator-plugin-1-0-11-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-23955 State: PUBLISHED Published: 2025-01-16T20:08:10.639Z Last Updated: 2025-01-17T20:07:53.699Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: xola.com Products: Xola Problem Types: CWE-862 Description: Missing Authorization vulnerability in xola.com Xola allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xola: from n/a through 1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/xola-bookings-for-tours-activities/vulnerability/wordpress-xola-plugin-1-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-23956 State: PUBLISHED Published: 2025-03-03T13:30:21.154Z Last Updated: 2025-03-03T15:36:49.203Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: WP Easy Post Mailer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Easy Post Mailer allows Reflected XSS. This issue affects WP Easy Post Mailer: from n/a through 0.64. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-mailer/vulnerability/wordpress-wp-easy-post-mailer-plugin-0-64-reflected-cross-site-scripting-xss-
e/wordpress/plugin/wp-mailer/vulnerability/wordpress-wp-easy-post-mailer-plugin-0-64-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23957 State: PUBLISHED Published: 2025-01-16T20:08:12.474Z Last Updated: 2025-01-17T17:38:30.532Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Sur.ly Products: Sur.ly Problem Types: CWE-862 Description: Missing Authorization vulnerability in Sur.ly Sur.ly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sur.ly: from n/a through 3.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/surly/vulnerability/wordpress-sur-ly-plugin-3-0-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-23958 State: PUBLISHED Published: 2025-04-17T15:48:25.883Z Last Updated: 2025-04-17T18:15:39.307Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: FADI MED Products: Editor Wysiwyg Background Color Problem Types: CWE-862 Description: Missing Authorization vulnerability in FADI MED Editor Wysiwyg Background Color allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Editor Wysiwyg Background Color: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/editor-wysiwyg-background-color/vulnerability/wordpress-editor-wysiwyg-back
s://patchstack.com/database/wordpress/plugin/editor-wysiwyg-background-color/vulnerability/wordpress-editor-wysiwyg-background-color-plugin-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-23959 State: PUBLISHED Published: 2025-01-22T14:29:25.018Z Last Updated: 2025-01-22T19:32:28.803Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Linus Lundahl Products: Good Old Gallery Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Linus Lundahl Good Old Gallery allows Reflected XSS. This issue affects Good Old Gallery: from n/a through 2.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/good-old-gallery/vulnerability/wordpress-good-old-gallery-plugin-2-1-2-reflected-cross-site-scripti
ase/wordpress/plugin/good-old-gallery/vulnerability/wordpress-good-old-gallery-plugin-2-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23960 State: PUBLISHED Published: 2025-01-23T15:29:43.302Z Last Updated: 2025-02-12T20:41:24.886Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: basteln3rk Products: Save & Import Image from URL Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in basteln3rk Save & Import Image from URL allows Reflected XSS. This issue affects Save & Import Image from URL: from n/a through 0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/save-import-image-from-url/vulnerability/wordpress-save-import-image-fr
https://patchstack.com/database/wordpress/plugin/save-import-image-from-url/vulnerability/wordpress-save-import-image-from-url-plugin-0-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23961 State: PUBLISHED Published: 2025-01-16T20:08:11.261Z Last Updated: 2025-01-17T20:01:39.125Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: WP Tasker Products: WordPress Graphs & Charts Problem Types: CWE-862 Description: Missing Authorization vulnerability in WP Tasker WordPress Graphs & Charts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Graphs & Charts: from n/a through 2.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/graph-lite/vulnerability/wordpress-wordpress-graphs-charts-plugin-2-0-8-broken-access-cont
com/database/wordpress/plugin/graph-lite/vulnerability/wordpress-wordpress-graphs-charts-plugin-2-0-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-23962 State: PUBLISHED Published: 2025-01-16T20:08:09.352Z Last Updated: 2025-01-17T20:23:45.652Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Goldstar Products: Goldstar Problem Types: CWE-862 Description: Missing Authorization vulnerability in Goldstar Goldstar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Goldstar: from n/a through 2.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/goldstar/vulnerability/wordpress-goldstar-plugin-2-1-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-23963 State: PUBLISHED Published: 2025-01-16T20:08:09.994Z Last Updated: 2025-01-17T20:22:55.479Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Sven Hofmann & Michael Schoenrock Products: Mark Posts Problem Types: CWE-862 Description: Missing Authorization vulnerability in Sven Hofmann & Michael Schoenrock Mark Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mark Posts: from n/a through 2.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mark-posts/vulnerability/wordpress-mark-posts-plugin-2-2-3-broken-access-control-vulner
ck.com/database/wordpress/plugin/mark-posts/vulnerability/wordpress-mark-posts-plugin-2-2-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-23964 State: PUBLISHED Published: 2025-03-26T14:24:17.390Z Last Updated: 2025-03-26T15:30:59.681Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Google Plus Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Google Plus allows Reflected XSS. This issue affects Google Plus: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/google-plus-google/vulnerability/wordpress-google-plus-plugin-1-0-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=c
le-plus-google/vulnerability/wordpress-google-plus-plugin-1-0-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23965 State: PUBLISHED Published: 2025-01-16T20:08:11.881Z Last Updated: 2025-01-17T19:23:03.961Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Kopatheme Products: Kopa Nictitate Toolkit Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kopatheme Kopa Nictitate Toolkit allows Stored XSS.This issue affects Kopa Nictitate Toolkit: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/kopa-nictitate-toolkit/vulnerability/wordpress-kopa-nictitate-toolkit-plugin-1-0-2-cross-si
om/database/wordpress/plugin/kopa-nictitate-toolkit/vulnerability/wordpress-kopa-nictitate-toolkit-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23966 State: PUBLISHED Published: 2025-01-22T14:29:27.052Z Last Updated: 2025-01-22T19:28:03.277Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: AlaFalaki Products: a Gateway for Pasargad Bank on WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AlaFalaki a Gateway for Pasargad Bank on WooCommerce allows Reflected XSS. This issue affects a Gateway for Pasargad Bank on WooCommerce: from n/a through 2.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/a-gateway-for-pasargad-bank-o
s: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/a-gateway-for-pasargad-bank-on-woocommerce/vulnerability/wordpress-a-gateway-for-pasargad-bank-on-woocommerce-plugin-2-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23967 State: PUBLISHED Published: 2025-06-27T11:52:11.964Z Last Updated: 2025-06-27T13:43:09.529Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: wpopal Products: GG Bought Together for WooCommerce Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpopal GG Bought Together for WooCommerce allows SQL Injection. This issue affects GG Bought Together for WooCommerce: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gg-bought-together/vulnerability/wordpress-gg-bought-to
: References: - https://patchstack.com/database/wordpress/plugin/gg-bought-together/vulnerability/wordpress-gg-bought-together-for-woocommerce-1-0-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-23968 State: PUBLISHED Published: 2025-07-03T18:49:18.872Z Last Updated: 2025-07-07T08:44:40.595Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: WPCenter Products: AiBud WP Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in WPCenter AiBud WP allows Upload a Web Shell to a Web Server.This issue affects AiBud WP: from n/a through 1.8.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/aibuddy-openai-chatgpt/vulnerability/wordpress-aibud-wp-plugin-1-8-5-arbitrary-file-upload-vulnerability?_s_id=cve - https://ryankozak.com/posts/
lnerability/wordpress-aibud-wp-plugin-1-8-5-arbitrary-file-upload-vulnerability?_s_id=cve - https://ryankozak.com/posts/cve-2025-23968/ - https://github.com/d0n601/CVE-2025-23968
CVE ID: CVE-2025-23969 State: PUBLISHED Published: 2025-06-06T12:54:41.515Z Last Updated: 2025-06-06T14:37:59.911Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: whassan Products: KI Live Video Conferences Problem Types: CWE-497 Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in whassan KI Live Video Conferences allows Retrieve Embedded Sensitive Data. This issue affects KI Live Video Conferences: from n/a through 5.5.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ki-live-video-conferences/vulnerability/wordpress-ki-live-video-confere
https://patchstack.com/database/wordpress/plugin/ki-live-video-conferences/vulnerability/wordpress-ki-live-video-conferences-5-5-15-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-23970 State: PUBLISHED Published: 2025-07-04T11:18:11.730Z Last Updated: 2025-07-07T14:57:56.706Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: aonetheme Products: Service Finder Booking Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in aonetheme Service Finder Booking allows Privilege Escalation. This issue affects Service Finder Booking: from n/a through 6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sf-booking/vulnerability/wordpress-service-finder-booking-6-0-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-23971 State: PUBLISHED Published: 2025-06-06T12:54:40.993Z Last Updated: 2025-06-06T16:23:08.591Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: whassan Products: KI Live Video Conferences Problem Types: CWE-862 Description: Missing Authorization vulnerability in whassan KI Live Video Conferences allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects KI Live Video Conferences: from n/a through 5.5.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ki-live-video-conferences/vulnerability/wordpress-ki-live-video-conferences-5-5-15-broken-ac
m/database/wordpress/plugin/ki-live-video-conferences/vulnerability/wordpress-ki-live-video-conferences-5-5-15-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-23972 State: PUBLISHED Published: 2025-07-04T08:42:03.564Z Last Updated: 2025-07-08T14:18:16.827Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Brian S. Reed Products: Contact Form 7 reCAPTCHA Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Brian S. Reed Contact Form 7 reCAPTCHA allows Cross Site Request Forgery. This issue affects Contact Form 7 reCAPTCHA: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/contact-form-7-recaptcha/vulnerability/wordpress-contact-form-7-recaptcha-plugin-1-2-0-cross-site-request-forg
ss/plugin/contact-form-7-recaptcha/vulnerability/wordpress-contact-form-7-recaptcha-plugin-1-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-23973 State: PUBLISHED Published: 2025-06-27T11:52:11.272Z Last Updated: 2025-06-27T13:43:16.994Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: dugudlabs Products: SpecFit-Virtual Try On Woocommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dugudlabs SpecFit-Virtual Try On Woocommerce allows Stored XSS. This issue affects SpecFit-Virtual Try On Woocommerce: from n/a through 7.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/try-on-for-woocommerce/vulnerability/wordpress-specfit-v