Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
evel access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/15e671e5-a9a6-4439-93cc-8d46fe0cde16?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3394112%40data-tables-generator-by-supsystic&new=3394112%40data-tables-generator-by-supsystic&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12090 State: PUBLISHED Published: 2025-11-01T05:40:22.553Z Last Updated: 2025-11-03T13:31:21.726Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: emarket-design Products: Employee Spotlight – Team Member Showcase & Meet the Team Plugin Problem Types: CWE-79 Description: The Employee Spotlight – Team Member Showcase & Meet the Team Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Social URLs in all versions up to, and including, 5.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web script
s makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/45d7fe64-c51b-4801-a190-92396e5db27d?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3386767%40employee-spotlight&new=3386767%40employee-spotlight&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12092 State: PUBLISHED Published: 2025-11-08T09:28:09.323Z Last Updated: 2025-11-10T14:14:08.652Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: gregross Products: CYAN Backup Problem Types: CWE-22 Description: The CYAN Backup plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete' functionality in all versions up to, and including, 2.5.4. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Addi
the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/39972b06-920f-48b0-aa36-bb5caab87cb6?source=cve - https://plugins.trac.wordpress.org/changeset/3390065/cyan-backup/tags/2.5.5/includes/page-backups.php - https://github.com/toolstack/cyan-backup/commit/4a79d23e8ba330b5cb655a083c6a00ef32a7b249
CVE ID: CVE-2025-12094 State: PUBLISHED Published: 2025-10-31T08:25:55.153Z Last Updated: 2025-10-31T14:18:40.788Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: oopspam Products: OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) Problem Types: CWE-693 Description: The OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) plugin for WordPress is vulnerable to IP Header Spoofing in all versions up to, and including, 1.2.53. This is due to the plugin trusting client-controlled forwarded headers (such as CF-Connecting-IP, X-Forwarded-For, and others) without verifying that those headers originate from legit
eaders (such as CF-Connecting-IP, X-Forwarded-For, and others) without verifying that those headers originate from legitimate, trusted proxies. This makes it possible for unauthenticated attackers to spoof their IP address and bypass IP-based security controls, including blocked IP lists and rate limiting protections, by sending arbitrary HTTP headers with their requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b5137bc2-912b-4e25-966e-515e8d9fc21c?source=cve - https://plugins.trac.wordpress.org/browser/oopspam-anti-spam/tags/1.2.49/include/helpers.php#L268 - https://plugins.trac.wordpress.org/changeset/3386104
rg/browser/oopspam-anti-spam/tags/1.2.49/include/helpers.php#L268 - https://plugins.trac.wordpress.org/changeset/3386104/oopspam-anti-spam/trunk/include/helpers.php
CVE ID: CVE-2025-12095 State: PUBLISHED Published: 2025-10-25T05:31:23.467Z Last Updated: 2025-10-27T15:55:27.834Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: astoundify Products: Simple Registration for WooCommerce Problem Types: CWE-352 Description: The Simple Registration for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.8. This is due to missing nonce validation on the role requests admin page handler in the includes/display-role-admin.php file. This makes it possible for unauthenticated attackers to approve pending role requests and escalate user privileges via a forged request g
sible for unauthenticated attackers to approve pending role requests and escalate user privileges via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9c32fcaf-afc3-4493-8cd8-6f49bbe40c7b?source=cve - https://plugins.trac.wordpress.org/browser/woocommerce-simple-registration/tags/1.5.8/includes/display-role-admin.php#L132 - https://plugins.trac.wordpress.org/changeset/3383124
CVE ID: CVE-2025-12096 State: PUBLISHED Published: 2025-10-24T08:23:59.609Z Last Updated: 2025-10-24T12:26:56.359Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: prawas Products: Simple Excel Pricelist for WooCommerce Problem Types: CWE-79 Description: The Simple Excel Pricelist for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pricelist' shortcode in all versions up to, and including, 1.13 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that wil
for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5e7fa38f-26ef-4011-af18-c18883159425?source=cve - https://plugins.trac.wordpress.org/browser/simple-excel-pricelist-for-woocommerce/trunk/classes/sepwWorker.php#L176
CVE ID: CVE-2025-12098 State: PUBLISHED Published: 2025-11-08T08:27:42.051Z Last Updated: 2025-11-10T14:14:14.118Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: academylms Products: Academy LMS Pro Problem Types: CWE-200 Description: The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.8 via the 'enqueue_social_login_script' function. This makes it possible for unauthenticated attackers to extract sensitive data including the Facebook App Secret if Facebook Social Login is enabled. Additional Analyst Notes: - CISA ADP Vulnrichmen
including the Facebook App Secret if Facebook Social Login is enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f70ee339-d9d4-43ad-8605-6a5533783718?source=cve - https://academylms.net/whats-new/
CVE ID: CVE-2025-12099 State: PUBLISHED Published: 2025-11-08T08:27:41.410Z Last Updated: 2025-11-10T14:14:21.468Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: academylms Products: Academy LMS – WordPress LMS Plugin for Complete eLearning Solution Problem Types: CWE-502 Description: The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.3.8 via deserialization of untrusted input in the 'import_all_courses' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP Object. No known PO
it possible for authenticated attackers, with Administrator-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/294b2a7c-8b54-4022-a3af-9a3e3d1d4c11?sourc
ment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/294b2a7c-8b54-4022-a3af-9a3e3d1d4c11?source=cve - https://plugins.trac.wordpress.org/browser/academy/trunk/includes/ajax/course.php#L815 - https://plugins.trac.wordpress.org/changeset/3390420/
CVE ID: CVE-2025-12100 State: PUBLISHED Published: 2025-10-23T21:02:18.599Z Last Updated: 2025-10-25T03:56:10.621Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: MongoDB Products: BI Connector ODBC driver Problem Types: CWE-276 Description: Incorrect Default Permissions vulnerability in MongoDB BI Connector ODBC driver allows Privilege Escalation.This issue affects BI Connector ODBC driver: from 1.0.0 through 1.4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mongodb/mongo-bi-connector-odbc-driver/releases/tag/v1.4.7
CVE ID: CVE-2025-12101 State: PUBLISHED Published: 2025-11-11T13:44:56.765Z Last Updated: 2025-11-12T20:03:26.212Z Vendors: NetScaler Products: ADC, Gateway Problem Types: CWE-79 Description: Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX695486
CVE ID: CVE-2025-12103 State: PUBLISHED Published: 2025-10-28T13:31:59.318Z Last Updated: 2025-11-19T14:44:07.440Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Red Hat Products: Red Hat OpenShift AI 3.0, Red Hat OpenShift AI (RHOAI) Problem Types: CWE-266 Description: A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role `trustyai-service-operator-lmeval-user-role` and a CRB `trustyai-service-operator-default-lmeval-user-rolebinding` which is being applied to `system:authenticated` ma
nd a CRB `trustyai-service-operator-default-lmeval-user-rolebinding` which is being applied to `system:authenticated` making it so that every single user or service account can get a list of pods running in any namespace on the cluster Additionally users can access all `persistentvolumeclaims` and `lmevaljobs` Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:21117 - https://access.redhat.com/security/cve/CVE-2025-12103 - https://bugzilla.redhat.com/show_bug.cgi?id=2405966
CVE ID: CVE-2025-12104 State: PUBLISHED Published: 2025-10-23T03:56:26.769Z Last Updated: 2025-10-23T15:23:46.521Z Vendors: Azure Access Technology Products: BLU-IC2, BLU-IC4 Problem Types: CWE-1104 Description: Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://azure-access.com/security-advisories
CVE ID: CVE-2025-12105 State: PUBLISHED Published: 2025-10-23T09:14:14.077Z Last Updated: 2025-11-11T13:36:30.985Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-416 Description: A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missing state synchr
are aborted at specific timing intervals, an internal message queue item may be freed twice due to missing state synchronization. This leads to a use-after-free memory access, potentially crashing the affected application. Attackers could exploit this behavior remotely by triggering specific HTTP/2 read and cancel sequences, resulting in a denial-of-service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-12105 - https://bugzilla.redhat.com/show_bug.cgi?id=2405992
CVE ID: CVE-2025-12108 State: PUBLISHED Published: 2025-11-04T18:43:54.147Z Last Updated: 2025-11-05T14:46:47.761Z Vendors: Survision Products: License Plate Recognition Camera Problem Types: CWE-306 Description: The Survision LPR Camera system does not enforce password protection by default. This allows access to the configuration wizard immediately without a login prompt or credentials check. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-02
CVE ID: CVE-2025-12110 State: PUBLISHED Published: 2025-10-23T14:19:24.752Z Last Updated: 2025-11-13T22:32:47.656Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: Red Hat build of Keycloak 26.4, Red Hat build of Keycloak 26.4.4 Problem Types: CWE-613 Description: A flaw was found in Keycloak. An offline session continues to be valid when the offline_access scope is removed from the client. The refresh token is accepted and you can continue to request new tokens for the session. As it can lead to a situation where an administrator removes the scope, and assumes that offline sessions are no longer available, but they are. Additional Analyst N
strator removes the scope, and assumes that offline sessions are no longer available, but they are. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:21370 - https://access.redhat.com/errata/RHSA-2025:21371 - https://access.redhat.com/security/cve/CVE-2025-12110 - https://bugzilla.redhat.com/show_bug.cgi?id=2406033
CVE ID: CVE-2025-12112 State: PUBLISHED Published: 2025-11-08T03:27:50.117Z Last Updated: 2025-11-10T19:50:50.311Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: htplugins Products: Insert Headers and Footers Code – HT Script Problem Types: CWE-79 Description: The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via adding scripts in all versions up to, and including, 1.1.6 due to insufficient capability checks. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page
l access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f97ced40-c349-43b4-963f-2a49db4bbd4a?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3387037%40insert-headers-and-footers-script&new=3387037%40insert-headers-and-footers-script&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12113 State: PUBLISHED Published: 2025-11-12T07:27:41.353Z Last Updated: 2025-11-14T15:26:46.379Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: webtoffee Products: Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images Problem Types: CWE-862 Description: The Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the atgai_delete_api_key() function in all versions up to, and including, 1.8.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the API key c
8.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the API key connected to the site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5309e891-ced1-496f-8ee5-c089a91a7666?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3390619%40alt-text-generator&new=3390619%40alt-text-generator&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12114 State: PUBLISHED Published: 2025-10-23T15:29:13.361Z Last Updated: 2025-10-23T15:39:46.781Z Vendors: Azure Access Technology Products: BLU-IC2, BLU-IC4 Problem Types: CWE-1191 Description: Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://azure-access.com/security-advisories
CVE ID: CVE-2025-12115 State: PUBLISHED Published: 2025-10-31T09:27:21.530Z Last Updated: 2025-10-31T18:43:39.464Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: wpclever Products: WPC Name Your Price for WooCommerce Problem Types: CWE-602 Description: The WPC Name Your Price for WooCommerce plugin for WordPress is vulnerable to unauthorized price alteration in all versions up to, and including, 2.1.9. This is due to the plugin not disabling the ability to name a custom price when it has been specifically disabled for a product. This makes it possible for unauthenticated attackers to purchase products at prices less than they should be able to. Additional Ana
t possible for unauthenticated attackers to purchase products at prices less than they should be able to. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f64bc3c4-da89-4470-8353-d490f8bec408?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3386310%40wpc-name-your-price&new=3386310%40wpc-name-your-price&sfp_email=&sfph_mail=
CVE ID: CVE-2025-12118 State: PUBLISHED Published: 2025-11-01T04:27:41.429Z Last Updated: 2025-11-03T20:47:42.541Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: kevingillispie Products: Schema Scalpel Problem Types: CWE-79 Description: The Schema Scalpel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping when outputting user-supplied data into JSON-LD schema markup. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenev
ed attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9289e93c-22ac-4f3f-8a8a-591d9a598713?source=cve - https://plugins.trac.wordpress.org/browser/schema-scalpel/tags/1.6.1/public/class-schema-scalpel-public.php#L146 - https://plugins.trac.wordpress.org/browser/schema-scalpel/tags/1.6.1/public/class-schema-scalpel-public.php#L183 - https://github.com/kevingillispie/Schema-Scalpel/commit/0a24430ed4f99a3998d032e755cd97a57d4fae29
CVE ID: CVE-2025-12119 State: PUBLISHED Published: 2025-11-18T20:21:08.252Z Last Updated: 2025-11-19T16:48:51.591Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) Vendors: MongoDB Products: C Driver, PHP Driver Problem Types: CWE-825 Description: A mongoc_bulk_operation_t may read invalid memory if large options are passed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mongodb/mongo-php-driver/releases/tag/1.21.2 - https://github.com/mongodb/mongo-c-driver/releases/tag/1.30.6 - https://github.com/mongodb/mongo-c-driver/releases/tag/2.1.2
CVE ID: CVE-2025-12120 State: PUBLISHED Published: 2025-11-20T16:38:29.108Z Last Updated: 2025-11-20T18:09:45.449Z Vendors: Lite XL Products: Lite XL Problem Types: CWE-829 Inclusion of Functionality from Untrusted Control Sphere Description: Lite XL versions 2.1.8 and prior automatically execute the .lite_project.lua file when opening a project directory, without prompting the user for confirmation. The .lite_project.lua file is intended for project-specific configuration but can contain executable Lua logic. This behavior could allow execution of untrusted Lua code if a user opens a malicious project, potentially leading to arbitrary code execution with the privileges of the Lite XL proces
ser opens a malicious project, potentially leading to arbitrary code execution with the privileges of the Lite XL process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lite-xl/lite-xl/pull/2164 - https://kb.cert.org/vuls/id/579478
CVE ID: CVE-2025-12121 State: PUBLISHED Published: 2025-11-20T16:39:05.297Z Last Updated: 2025-11-20T18:10:14.597Z Vendors: Lite XL Products: Lite XL Problem Types: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Description: Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary command execution through unsanitized shell command construction. This function was used in project directory launching (core.lua), drag-and-drop file handling (rootview.lua), and the “open in system” command in the treeview plugin (treeview.lua). If an attacker could influence input to system.exec, they might ex
ystem” command in the treeview plugin (treeview.lua). If an attacker could influence input to system.exec, they might execute arbitrary commands with the privileges of the Lite XL process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lite-xl/lite-xl/pull/2163 - https://kb.cert.org/vuls/id/579478
CVE ID: CVE-2025-12125 State: PUBLISHED Published: 2025-11-08T03:27:50.508Z Last Updated: 2025-11-10T19:45:46.675Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: linksoftware Products: HTML Forms – Simple WordPress Forms Plugin Problem Types: CWE-79 Description: The HTML Forms – Simple WordPress Forms Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute wheneve