Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ploited. Upgrading to version 15.4.0.1028 is able to address this issue. It is advisable to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323906 - https://vuldb.com/?ctiid.323906 - https://vuldb.com/?submit.648484 - https://www.yuque.com/u28538081/sea4q5/aokhgdfpf5ueguk5 - https://www.spyshelter.com/help/SpyShelter-Changelog#15401028-3sep2025
CVE ID: CVE-2025-10477 State: PUBLISHED Published: 2025-09-15T20:32:05.542Z Last Updated: 2025-09-15T20:40:36.690Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: kidaze Products: CourseSelectionSystem Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. The affected element is an unknown function of the file /Profilers/PriProfile/eligibility.php. Such manipulation of the argument Branch leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used. This product does not use versioning. This is why information a
ly. The exploit is publicly available and might be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323913 - https://vuldb.com/?ctiid.323913 - https://vuldb.com/?submit.648516 - https://github.com/Miker132/CVE-/issues/6
CVE ID: CVE-2025-10479 State: PUBLISHED Published: 2025-09-15T21:02:07.501Z Last Updated: 2025-09-16T15:43:21.122Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Student File Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in SourceCodester Online Student File Management System 1.0. The impacted element is an unknown function of the file /index.php. Performing manipulation of the argument stud_no results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323914 - https://vuldb.com/?ctiid.323914 - https://vuldb.com/?submit.648520 - https://github.com/ganzhi-qcy/cve/issues/25 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10480 State: PUBLISHED Published: 2025-09-15T21:32:07.447Z Last Updated: 2025-09-16T13:49:50.703Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Student File Management System Problem Types: CWE-434, CWE-284 Description: A weakness has been identified in SourceCodester Online Student File Management System 1.0. This affects an unknown function of the file /save_file.php. Executing manipulation can lead to unrestricted upload. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
ble to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323915 - https://vuldb.com/?ctiid.323915 - https://vuldb.com/?submit.648541 - https://github.com/ganzhi-qcy/cve/issues/26 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10481 State: PUBLISHED Published: 2025-09-15T22:02:08.657Z Last Updated: 2025-09-16T13:48:19.838Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Student File Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in SourceCodester Online Student File Management System 1.0. This impacts an unknown function of the file /remove_file.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
ploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323916 - https://vuldb.com/?ctiid.323916 - https://vuldb.com/?submit.648542 - https://github.com/qcycop0101-hash/CVE/issues/10 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10482 State: PUBLISHED Published: 2025-09-15T22:02:11.910Z Last Updated: 2025-09-16T13:47:29.834Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Student File Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323917 - http
ic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323917 - https://vuldb.com/?ctiid.323917 - https://vuldb.com/?submit.648580 - https://github.com/qcycop0101-hash/CVE/issues/11 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10483 State: PUBLISHED Published: 2025-09-15T22:32:07.495Z Last Updated: 2025-09-16T13:46:37.342Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Student File Management System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/save_user.php. This manipulation of the argument firstname causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. Other parameters might be affected as well. Additional Anal
ut remotely. The exploit has been published and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323918 - https://vuldb.com/?ctiid.323918 - https://vuldb.com/?submit.648597 - https://github.com/qcycop0101-hash/CVE/issues/12 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10485 State: PUBLISHED Published: 2025-09-15T22:32:09.930Z Last Updated: 2025-09-16T13:45:59.226Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: pojoin Products: h3blog Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in pojoin h3blog up to 5bf704425ebc11f4c24da51f32f36bb17ae20489. Affected by this issue is the function ppt_log of the file /login of the component HTTP Header Handler. Such manipulation of the argument X-Forwarded-For leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. This product utilizes a rolling release system for contin
The exploit has been disclosed to the public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323919 - https://vuldb.com/?ctiid.323919 - https://vuldb.com/?submit.648548 - https://github.com/hhhh333/CVE/blob/main/xss.md
CVE ID: CVE-2025-10486 State: PUBLISHED Published: 2025-10-15T08:26:01.576Z Last Updated: 2025-10-15T14:54:06.014Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: steadycontent Products: Content Writer Problem Types: CWE-532 Description: The Content Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.8 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bb2045
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bb20452b-7049-4567-8288-6d24350e2143?source=cve - https://plugins.svn.wordpress.org/content-writer/tags/3.6.8/lib/sc_functions.php - https://wordpress.org/plugins/content-writer/
CVE ID: CVE-2025-10487 State: PUBLISHED Published: 2025-11-01T06:40:37.833Z Last Updated: 2025-11-03T13:30:40.805Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: monetizemore Products: Advanced Ads – Ad Manager & AdSense Problem Types: CWE-94 Description: The Advanced Ads – Ad Manager & AdSense plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.12 via the select_one() function. This is due to the endpoint not properly restricting access to the AJAX endpoint or limiting the functions that can be called to safe functions. This makes it possible for unauthenticated attackers to call arbitrary functions beginning
be called to safe functions. This makes it possible for unauthenticated attackers to call arbitrary functions beginning with get_the_ like get_the_excerpt which can make information exposure possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3efe6b81-72db-4419-92a3-26e22ebf46e8?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3381123%40advanced-ads&new=3381123%40advanced-ads&sfp_email=&sfph_mail=
CVE ID: CVE-2025-10488 State: PUBLISHED Published: 2025-10-25T06:49:21.186Z Last Updated: 2025-10-27T15:54:15.168Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: wpwax Products: Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings Problem Types: CWE-22 Description: The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to arbitrary file move due to insufficient file path validation in the add_listing_action AJAX action in all versions up to, and including, 8.4.8. This makes it possible for unauthenticated attackers to move arbitrary files on the server, which can easily l
g, 8.4.8. This makes it possible for unauthenticated attackers to move arbitrary files on the server, which can easily lead to remote code execution when the right file is moved (such as wp-config.php). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2249ef72-9955-4636-b32f-e88720923268?source=cve - https://plugins.trac.wordpress.org/browser/directorist/tags/8.4.5/includes/classes/class-add-listing.php#L634 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3377181%40directorist&new=3377181%40directorist&sfp_email=&sfph_mail=
CVE ID: CVE-2025-10489 State: PUBLISHED Published: 2025-09-20T04:27:55.370Z Last Updated: 2025-09-22T15:10:15.514Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: brainstormforce Products: SureForms – Drag and Drop Contact Form Builder – Multi-step Forms, Conversational Forms and more Problem Types: CWE-862 Description: The SureForms – Drag and Drop Contact Form Builder – Multi-step Forms, Conversational Forms and more plugin for WordPress is vulnerable to unauthorized creation of forms due to a missing capability check on the register_post_types() function in all versions up to, and including, 1.12.0. This makes it possible for authenticated attackers, with
_types() function in all versions up to, and including, 1.12.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to create forms when the user interface specifically prohibits it. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6d03f316-542c-4128-b49d-fd2fd8609dd6?source=cve - https://plugins.trac.wordpress.org/changeset/3363914/sureforms/trunk/inc/post-types.php
CVE ID: CVE-2025-10490 State: PUBLISHED Published: 2025-09-26T06:43:29.951Z Last Updated: 2025-09-26T19:53:18.971Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: dylanjkotze Products: Zephyr Project Manager Problem Types: CWE-79 Description: The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.3.202 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Thi
ons and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fdf68c19-ee1b-4d0a-876b-c061763b39c3?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3366388%40zephyr-project-manager&new=3366388%40zephyr-project-manager&sfp_email=&sfph_mail=
CVE ID: CVE-2025-10491 State: PUBLISHED Published: 2025-09-15T16:04:54.221Z Last Updated: 2025-09-16T03:55:21.417Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: MongoDB Inc Products: MongoDB Server Problem Types: CWE-284 Description: The MongoDB Windows installation MSI may leave ACLs unset on custom installation directories allowing a local attacker to introduce executable code to MongoDB's process via DLL hijacking. This issue affects MongoDB Server v6.0 version prior to 6.0.25, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jira.mongodb.org
er v8.0 version prior to 8.0.5 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jira.mongodb.org/browse/SERVER-51366
CVE ID: CVE-2025-10492 State: PUBLISHED Published: 2025-09-16T16:41:44.931Z Last Updated: 2025-10-14T04:49:45.696Z Vendors: Jaspersoft Products: JasperReports Library Community Edition, Jaspersoft Studio Community Edition, JasperReports Server, JasperReports Library Professional, Jaspersoft Studio Professional, JasperReports IO Professional, JasperReports IO At-Scale, JasperReports Web Studio Problem Types: CWE-502 Description: A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library Additional Analyst Notes: - CISA ADP Vulnrichm
execute arbitrary code remotely on systems that use the affected library Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6/
CVE ID: CVE-2025-10493 State: PUBLISHED Published: 2025-09-18T06:49:45.112Z Last Updated: 2025-09-18T14:03:36.463Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: prasunsen Products: Chained Quiz Problem Types: CWE-639 Description: The Chained Quiz plugin for WordPress is vulnerable to Insecure Direct Object Reference in version 1.3.4 and below via the quiz submission and completion mechanisms due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to hijack and modify other users' quiz attempts by manipulating the chained_completion_id cookie value, allowing them to alter quiz answers, scores, and results of
pts by manipulating the chained_completion_id cookie value, allowing them to alter quiz answers, scores, and results of any user. The vulnerability was partially patched in versions 1.3.4 and 1.3.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1d8f6965-1fe3-4f24-bd6b-9026e91bc5db?source=cve - https://plugins.trac.wordpress.org/browser/chained-quiz/tags/1.3.3/controllers/quizzes.php - https://plugins.trac.wordpress.org/browser/chained-quiz/tags/1.3.3/models/quiz.php - https://plugins.trac.wordpress.org/changeset/3362561/ - https://plugins.trac.wordpress.org/changeset/3362701/ - https://plugins.trac.wordpress.org/cha
.org/changeset/3362561/ - https://plugins.trac.wordpress.org/changeset/3362701/ - https://plugins.trac.wordpress.org/changeset/3362966/
CVE ID: CVE-2025-10494 State: PUBLISHED Published: 2025-10-08T03:31:32.827Z Last Updated: 2025-10-08T14:20:09.274Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: stylemix Products: Motors – Car Dealership & Classified Listings Plugin Problem Types: CWE-73 Description: The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation when deleting profile pictures in all versions up to, and including, 1.4.89. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to rem
attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e6066890-75b9-468d-9f67-78e93f58dcc1?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3369415%40motors-car-dealership-classified-listings%2Ftrunk&old=3367132%40motors-car-dealership-classified-listings%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2025-10495 State: PUBLISHED Published: 2025-11-12T19:18:44.859Z Last Updated: 2025-11-13T04:55:37.034Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: App Store, PC Manager, Browser, Legion Zone Problem Types: CWE-295 Description: A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/434328
CVE ID: CVE-2025-10496 State: PUBLISHED Published: 2025-10-09T02:09:53.793Z Last Updated: 2025-10-09T14:33:37.392Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: christophrado Products: Cookie Notice & Consent Problem Types: CWE-80 Description: The Cookie Notice & Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the uuid parameter in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichm
pts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/035097dd-8ebd-49b8-93ea-0f957594f130?source=cve - https://plugins.trac.wordpress.org/browser/cookie-notice-consent/tags/1.6.5/includes/class-cnc-admin.php#L33 - https://plugins.trac.wordpress.org/browser/cookie-notice-consent/tags/1.6.5/includes/class-cnc-logger.php#L141 - https://plugins.trac.wordpress.org/browser/cookie-notice-consent/tags/1.6.5/includes/class-cnc-logger.php#L259 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3373718%40cookie-notice-consent%2Ft
9 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3373718%40cookie-notice-consent%2Ftrunk&old=3345005%40cookie-notice-consent%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2025-10497 State: PUBLISHED Published: 2025-10-27T00:05:39.306Z Last Updated: 2025-10-28T15:02:48.809Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-770 Description: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to cause a denial of service condition by sending specially crafted payloads. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/10/22/patch-release-gitlab-18-5-1-released/ - https://gitlab.com/gitlab-
ences: - https://about.gitlab.com/releases/2025/10/22/patch-release-gitlab-18-5-1-released/ - https://gitlab.com/gitlab-org/gitlab/-/issues/570336 - https://hackerone.com/reports/3338151
CVE ID: CVE-2025-10498 State: PUBLISHED Published: 2025-09-27T02:25:14.180Z Last Updated: 2025-09-29T13:52:51.346Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: kstover Products: Ninja Forms – The Contact Form Builder That Grows With You Problem Types: CWE-352 Description: The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.12.0. This is due to missing or incorrect nonce validation when exporting CSV files. This makes it possible for unauthenticated attackers to delete those files granted they can trick an administrator into performing an action
e for unauthenticated attackers to delete those files granted they can trick an administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b082176c-9486-416c-8215-cdba4d6e5260?source=cve - https://plugins.trac.wordpress.org/browser/ninja-forms/trunk/includes/Admin/Menus/Submissions.php#L464 - https://plugins.trac.wordpress.org/changeset/3365881/ninja-forms/trunk?contextall=1&old=3362375&old_path=%2Fninja-forms%2Ftrunk#file6
CVE ID: CVE-2025-10499 State: PUBLISHED Published: 2025-09-27T02:25:13.451Z Last Updated: 2025-09-29T13:55:21.662Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: kstover Products: Ninja Forms – The Contact Form Builder That Grows With You Problem Types: CWE-352 Description: The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.12.0. This is due to missing or incorrect nonce validation on the maybe_opt_in() function. This makes it possible for unauthenticated attackers to opt an affected site into usage statistics collection via a forged request
it possible for unauthenticated attackers to opt an affected site into usage statistics collection via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a2f118fc-d99a-4713-865e-2da7a9e20db5?source=cve - https://plugins.trac.wordpress.org/browser/ninja-forms/trunk/lib/NF_Tracking.php - https://plugins.trac.wordpress.org/changeset/3365881/ninja-forms/trunk?contextall=1&old=3362375&old_path=%2Fninja-forms%2Ftrunk#file6