Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-62015 State: PUBLISHED Published: 2025-10-22T14:32:49.014Z Last Updated: 2025-11-13T10:33:46.504Z Vendors: Josh Kohlbach Products: Advanced Coupons for WooCommerce Coupons Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free.This issue affects Advanced Coupons for WooCommerce Coupons: from n/a through <= 4.6.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/advanced-coupons-for-woocommerce-free/vulnerability/wordpress-advanced-coup
vdp.patchstack.com/database/Wordpress/Plugin/advanced-coupons-for-woocommerce-free/vulnerability/wordpress-advanced-coupons-for-woocommerce-coupons-plugin-4-6-8-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-62016 State: PUBLISHED Published: 2025-11-06T15:55:24.586Z Last Updated: 2025-11-13T10:33:46.373Z Vendors: hogash Products: Kallyas Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n/a through <= 4.22.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/kallyas/vulnerability/wordpress-kallyas-theme-4-22-0-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-62017 State: PUBLISHED Published: 2025-11-06T15:55:25.294Z Last Updated: 2025-11-13T10:33:45.910Z Vendors: hogash Products: Kallyas Problem Types: CWE-862 Description: Missing Authorization vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n/a through <= 4.22.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/kallyas/vulnerability/wordpress-kallyas-theme-4-22-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62018 State: PUBLISHED Published: 2025-11-06T15:55:26.361Z Last Updated: 2025-11-13T10:33:46.353Z Vendors: hogash Products: Kallyas Problem Types: CWE-862 Description: Missing Authorization vulnerability in hogash Kallyas kallyas.This issue affects Kallyas: from n/a through <= 4.22.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/kallyas/vulnerability/wordpress-kallyas-theme-4-22-0-broken-access-control-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-62019 State: PUBLISHED Published: 2025-10-22T14:32:49.208Z Last Updated: 2025-11-13T10:33:46.280Z Vendors: WPZOOM Products: Recipe Card Blocks for Gutenberg & Elementor Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through <= 3.4.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/recipe-card-blocks-by-wpzoom/vulnerability/wordpress-recipe-card-blocks-for-gutenberg-elementor-plugin-3-4-8-broken-access-control-vulnerability?_s_
/vulnerability/wordpress-recipe-card-blocks-for-gutenberg-elementor-plugin-3-4-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62020 State: PUBLISHED Published: 2025-10-22T14:32:49.407Z Last Updated: 2025-11-13T10:33:46.519Z Vendors: Infomaniak Network Products: VOD Infomaniak Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak.This issue affects VOD Infomaniak: from n/a through <= 1.5.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/vod-infomaniak/vulnerability/wordpress-vod-infomaniak-plugin-1-5-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62021 State: PUBLISHED Published: 2025-10-22T14:32:49.606Z Last Updated: 2025-11-13T10:33:46.132Z Vendors: Made Neat Products: Acknowledgify Problem Types: CWE-862 Description: Missing Authorization vulnerability in Made Neat Acknowledgify acknowledgify.This issue affects Acknowledgify: from n/a through <= 1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/acknowledgify/vulnerability/wordpress-acknowledgify-plugin-1-1-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62022 State: PUBLISHED Published: 2025-10-22T14:32:49.815Z Last Updated: 2025-11-13T10:33:46.180Z Vendors: BuddyPress Products: BuddyPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in BuddyPress BuddyPress buddypress.This issue affects BuddyPress: from n/a through <= 14.3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/buddypress/vulnerability/wordpress-buddypress-plugin-14-3-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62023 State: PUBLISHED Published: 2025-10-22T14:32:50.026Z Last Updated: 2025-11-13T10:33:46.519Z Vendors: Cristián Lávaque Products: s2Member Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member.This issue affects s2Member: from n/a through <= 250905. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/s2member/vulnerability/wordpress-s2member-plugin-250905-remote-code-execution-rce-vulnerability?_s_id=cve
CVE ID: CVE-2025-62024 State: PUBLISHED Published: 2025-10-22T14:32:50.360Z Last Updated: 2025-11-13T10:33:46.406Z Vendors: Jonathan Jernigan Products: Pie Calendar Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jonathan Jernigan Pie Calendar pie-calendar.This issue affects Pie Calendar: from n/a through <= 1.2.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/pie-calendar/vulnerability/wordpress-pie-calendar-plugin-1-2-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62025 State: PUBLISHED Published: 2025-10-22T14:32:50.582Z Last Updated: 2025-11-13T10:33:46.328Z Vendors: eyecix Products: JobSearch Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a through < 3.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-jobsearch/vulnerability/wordpress-jobsearch-plugin-3-0-8-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-62026 State: PUBLISHED Published: 2025-10-22T14:32:50.799Z Last Updated: 2025-11-13T10:33:46.114Z Vendors: Blockspare Products: Blockspare Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in Blockspare Blockspare blockspare allows Retrieve Embedded Sensitive Data.This issue affects Blockspare: from n/a through <= 3.2.13.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/blockspare/vulnerability/wordpress-blockspare-plugin-3-2-13-2-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-62027 State: PUBLISHED Published: 2025-10-22T14:32:51.014Z Last Updated: 2025-11-13T10:33:45.910Z Vendors: StellarWP Products: Event Tickets Problem Types: CWE-862 Description: Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a through <= 5.26.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/event-tickets/vulnerability/wordpress-event-tickets-plugin-5-26-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62028 State: PUBLISHED Published: 2025-11-06T15:55:27.077Z Last Updated: 2025-11-13T10:33:45.870Z Vendors: ThemeNectar Products: Salient Problem Types: CWE-862 Description: Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Salient: from n/a through < 17.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/salient/vulnerability/wordpress-salient-theme-17-4-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62029 State: PUBLISHED Published: 2025-10-22T14:32:51.220Z Last Updated: 2025-11-13T10:33:46.206Z Vendors: themesion Products: Grevo Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themesion Grevo grevo.This issue affects Grevo: from n/a through <= 2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/grevo/vulnerability/wordpress-grevo-theme-2-4-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-62030 State: PUBLISHED Published: 2025-11-06T15:55:27.866Z Last Updated: 2025-11-13T10:33:46.229Z Vendors: tagDiv Products: tagDiv Composer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer.This issue affects tagDiv Composer: from n/a through <= 5.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/td-composer/vulnerability/wordpress-tagdiv-composer-plugin-5-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62031 State: PUBLISHED Published: 2025-11-06T15:55:28.516Z Last Updated: 2025-11-13T10:33:46.544Z Vendors: tagDiv Products: tagDiv Composer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Composer td-composer.This issue affects tagDiv Composer: from n/a through <= 5.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/td-composer/vulnerability/wordpress-tagdiv-composer-plugin-5-4-1-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-62032 State: PUBLISHED Published: 2025-11-06T15:55:29.230Z Last Updated: 2025-11-13T10:33:46.802Z Vendors: tagDiv Products: tagDiv Cloud Library Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Cloud Library td-cloud-library allows DOM-Based XSS.This issue affects tagDiv Cloud Library: from n/a through < 3.9.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/td-cloud-library/vulnerability/wordpress-tagdiv-cloud-library-plugin-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62033 State: PUBLISHED Published: 2025-11-06T15:55:29.843Z Last Updated: 2025-11-13T10:33:46.809Z Vendors: uxper Products: Togo Problem Types: CWE-862 Description: Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/togo/vulnerability/wordpress-togo-theme-1-0-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62034 State: PUBLISHED Published: 2025-11-06T15:55:30.572Z Last Updated: 2025-11-13T10:33:46.803Z Vendors: uxper Products: Togo Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/togo/vulnerability/wordpress-togo-theme-1-0-4-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-62035 State: PUBLISHED Published: 2025-11-06T15:55:31.398Z Last Updated: 2025-11-13T10:33:46.836Z Vendors: uxper Products: Togo Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/togo/vulnerability/wordpress-togo-theme-1-0-4-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-62036 State: PUBLISHED Published: 2025-11-06T15:55:32.766Z Last Updated: 2025-11-13T10:33:46.881Z Vendors: uxper Products: Togo Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/togo/vulnerability/wordpress-togo-theme-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62037 State: PUBLISHED Published: 2025-11-06T15:55:34.720Z Last Updated: 2025-11-13T10:33:46.905Z Vendors: uxper Products: Togo Problem Types: CWE-862 Description: Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/togo/vulnerability/wordpress-togo-theme-1-0-4-broken-access-control-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-62038 State: PUBLISHED Published: 2025-11-06T15:55:36.094Z Last Updated: 2025-11-13T10:33:46.992Z Vendors: Sovlix Products: MeetingHub Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in Sovlix MeetingHub meetinghub allows Retrieve Embedded Sensitive Data.This issue affects MeetingHub: from n/a through <= 1.23.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/meetinghub/vulnerability/wordpress-meetinghub-plugin-1-23-9-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-62039 State: PUBLISHED Published: 2025-11-06T15:55:37.380Z Last Updated: 2025-11-13T10:33:46.929Z Vendors: Ays Pro Products: AI ChatBot with ChatGPT and Content Generator by AYS Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Retrieve Embedded Sensitive Data.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through <= 2.6.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/ays-chatgpt-assistant/vulnerability/wordpress-ai-chatbot-with
es: - https://vdp.patchstack.com/database/Wordpress/Plugin/ays-chatgpt-assistant/vulnerability/wordpress-ai-chatbot-with-chatgpt-and-content-generator-by-ays-plugin-2-6-6-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-62040 State: PUBLISHED Published: 2025-11-06T15:55:38.092Z Last Updated: 2025-11-13T10:33:46.963Z Vendors: YOP Products: YOP Poll Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YOP YOP Poll yop-poll.This issue affects YOP Poll: from n/a through <= 6.5.37. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/yop-poll/vulnerability/wordpress-yop-poll-plugin-6-5-37-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62041 State: PUBLISHED Published: 2025-11-06T15:55:38.770Z Last Updated: 2025-11-13T10:33:46.932Z Vendors: CodexThemes Products: TheGem (Elementor) Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This issue affects TheGem (Elementor): from n/a through <= 5.10.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/thegem-elementor/vulnerability/wordpress-thegem-elementor-theme-5-10-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62042 State: PUBLISHED Published: 2025-10-22T14:32:51.413Z Last Updated: 2025-11-13T10:33:46.961Z Vendors: Bastien Ho Products: Event post Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through <= 5.10.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/event-post/vulnerability/wordpress-event-post-plugin-5-10-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62044 State: PUBLISHED Published: 2025-11-06T15:55:39.461Z Last Updated: 2025-11-13T10:33:47.020Z Vendors: CodexThemes Products: TheGem Theme Elements (for WPBakery) Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements.This issue affects TheGem Theme Elements (for WPBakery): from n/a through <= 5.10.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/thegem-elements/vulnerability/wordpress-thegem-theme-elements-for-wpbakery-plugin-5-10-5-1-cross-site-scriptin
ss/Plugin/thegem-elements/vulnerability/wordpress-thegem-theme-elements-for-wpbakery-plugin-5-10-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62045 State: PUBLISHED Published: 2025-11-06T15:55:41.551Z Last Updated: 2025-11-13T10:33:46.962Z Vendors: CodexThemes Products: TheGem Theme Elements (for WPBakery) Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements.This issue affects TheGem Theme Elements (for WPBakery): from n/a through <= 5.10.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/thegem-elements/vulnerability/wordpress-thegem-theme-elements-for-wpbakery-plugin-5-10-5-1-
om/database/Wordpress/Plugin/thegem-elements/vulnerability/wordpress-thegem-theme-elements-for-wpbakery-plugin-5-10-5-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-62046 State: PUBLISHED Published: 2025-11-06T15:55:42.909Z Last Updated: 2025-11-13T10:33:47.009Z Vendors: CodexThemes Products: TheGem Demo Import (for WPBakery) Problem Types: CWE-862 Description: Missing Authorization vulnerability in CodexThemes TheGem Demo Import (for WPBakery) thegem-importer.This issue affects TheGem Demo Import (for WPBakery): from n/a through <= 5.10.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/thegem-importer/vulnerability/wordpress-thegem-demo-import-for-wpbakery-plugin-5-10-5-arbitrary-content-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-62047 State: PUBLISHED Published: 2025-11-06T15:55:43.609Z Last Updated: 2025-11-13T10:33:46.981Z Vendors: Case-Themes Products: Case Addons Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issue affects Case Addons: from n/a through < 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/case-addons/vulnerability/wordpress-case-addons-plugin-1-3-0-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-62048 State: PUBLISHED Published: 2025-10-22T14:32:51.617Z Last Updated: 2025-11-13T10:33:47.040Z Vendors: WPMU DEV - Your All-in-One WordPress Platform Products: SmartCrawl Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl smartcrawl-seo.This issue affects SmartCrawl: from n/a through <= 3.14.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/smartcrawl-seo/vulnerability/wordpress-smartcrawl-plugin-3-14-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62049 State: PUBLISHED Published: 2025-11-06T15:55:44.281Z Last Updated: 2025-11-13T10:33:47.048Z Vendors: Stylemix Products: Cost Calculator Builder Problem Types: CWE-862 Description: Missing Authorization vulnerability in Stylemix Cost Calculator Builder cost-calculator-builder.This issue affects Cost Calculator Builder: from n/a through <= 3.5.32. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/cost-calculator-builder/vulnerability/wordpress-cost-calculator-builder-plugin-3-5-32-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62051 State: PUBLISHED Published: 2025-11-06T15:55:47.211Z Last Updated: 2025-11-13T10:33:47.028Z Vendors: AndonDesign Products: UDesign Core Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign Core u-design-core.This issue affects UDesign Core: from n/a through <= 4.14.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/u-design-core/vulnerability/wordpress-udesign-core-plugin-4-14-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62052 State: PUBLISHED Published: 2025-10-22T14:32:51.853Z Last Updated: 2025-11-13T10:33:47.172Z Vendors: Horea Radu Products: One Page Express Companion Problem Types: CWE-862 Description: Missing Authorization vulnerability in Horea Radu One Page Express Companion one-page-express-companion.This issue affects One Page Express Companion: from n/a through <= 1.6.43. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/one-page-express-companion/vulnerability/wordpress-one-page-express-companion-plugin-1-6-43-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62053 State: PUBLISHED Published: 2025-11-06T15:55:48.526Z Last Updated: 2025-11-13T10:33:47.002Z Vendors: favethemes Products: Houzez Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through < 4.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/houzez/vulnerability/wordpress-houzez-theme-4-2-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-62054 State: PUBLISHED Published: 2025-10-22T14:32:52.067Z Last Updated: 2025-11-13T10:33:47.140Z Vendors: favethemes Products: Houzez Theme - Functionality Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issue affects Houzez Theme - Functionality: from n/a through <= 4.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/houzez-theme-functionality/vulnerability/wordpress-houzez-theme-functionality-plugin-4-1-8-local-file-inclusi
ess/Plugin/houzez-theme-functionality/vulnerability/wordpress-houzez-theme-functionality-plugin-4-1-8-local-file-inclusion-vulnerability?_s_id=cve