Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-58956 State: PUBLISHED Published: 2025-09-22T18:26:14.211Z Last Updated: 2025-09-23T20:37:43.480Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: loopus Products: WP Attractive Donations System Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Attractive Donations System allows Stored XSS. This issue affects WP Attractive Donations System: from n/a through n/a. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-attractive-donations-system-easy-stripe-paypal-donations/vulnerability/wordpress-wp-attractive-donations-system-plugin-1-29
ractive-donations-system-easy-stripe-paypal-donations/vulnerability/wordpress-wp-attractive-donations-system-plugin-1-29-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58957 State: PUBLISHED Published: 2025-09-22T18:26:13.485Z Last Updated: 2025-09-23T17:48:25.296Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Vikas Ratudi Products: VPSUForm Problem Types: CWE-862 Description: Missing Authorization vulnerability in Vikas Ratudi VPSUForm allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects VPSUForm: from n/a through 3.2.20. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/v-form/vulnerability/wordpress-vpsuform-plugin-3-2-20-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58958 State: PUBLISHED Published: 2025-10-22T14:32:35.016Z Last Updated: 2025-11-13T10:33:42.999Z Vendors: ThemeMove Products: SmilePure Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove SmilePure smilepure allows PHP Local File Inclusion.This issue affects SmilePure: from n/a through < 1.8.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/smilepure/vulnerability/wordpress-smilepure-theme-1-8-5-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-58959 State: PUBLISHED Published: 2025-10-22T14:32:35.198Z Last Updated: 2025-11-13T10:33:42.851Z Vendors: AmentoTech Products: Taskbot Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AmentoTech Taskbot taskbot allows Path Traversal.This issue affects Taskbot: from n/a through <= 6.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/taskbot/vulnerability/wordpress-taskbot-plugin-6-4-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-58960 State: PUBLISHED Published: 2025-09-22T18:26:12.788Z Last Updated: 2025-09-23T17:48:32.228Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: brijeshk89 Products: IP Based Login Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brijeshk89 IP Based Login allows Stored XSS. This issue affects IP Based Login: from n/a through 2.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ip-based-login/vulnerability/wordpress-ip-based-login-plugin-2-4-3-cross-site-scripting-xss-vulnerability?_s_id=
/plugin/ip-based-login/vulnerability/wordpress-ip-based-login-plugin-2-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58961 State: PUBLISHED Published: 2025-10-22T14:32:35.382Z Last Updated: 2025-11-13T10:33:42.929Z Vendors: kamleshyadav Products: CF7 Auto Responder Addon Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kamleshyadav CF7 Auto Responder Addon CF7-autoresponder-addon allows DOM-Based XSS.This issue affects CF7 Auto Responder Addon: from n/a through <= 2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/CF7-autoresponder-addon/vulnerability/wordpress-cf7-auto-responder-addon-plugin-2-4-cross-site-scripting-xss-vulnerabili
CF7-autoresponder-addon/vulnerability/wordpress-cf7-auto-responder-addon-plugin-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58962 State: PUBLISHED Published: 2025-09-22T18:26:12.090Z Last Updated: 2025-09-23T17:48:39.416Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: publitio Products: Publitio Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in publitio Publitio allows Server Side Request Forgery. This issue affects Publitio: from n/a through 2.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/publitio/vulnerability/wordpress-publitio-plugin-2-2-1-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58963 State: PUBLISHED Published: 2025-10-22T14:32:35.581Z Last Updated: 2025-11-13T10:33:42.862Z Vendors: 7oroof Products: Medcity Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in 7oroof Medcity medcity allows Upload a Web Shell to a Web Server.This issue affects Medcity: from n/a through < 1.1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/medcity/vulnerability/wordpress-medcity-theme-1-1-9-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-58964 State: PUBLISHED Published: 2025-11-06T15:54:29.627Z Last Updated: 2025-11-17T16:32:00.411Z Vendors: skygroup Products: Enzy Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Enzy enzy allows Reflected XSS.This issue affects Enzy: from n/a through < 1.6.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/enzy/vulnerability/wordpress-enzy-theme-1-6-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58965 State: PUBLISHED Published: 2025-09-22T18:26:11.395Z Last Updated: 2025-09-23T17:48:47.324Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Agency Dominion Inc. Products: Fusion Page Builder : Extension &#8211; Gallery Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Agency Dominion Inc. Fusion Page Builder : Extension &#8211; Gallery allows Stored XSS. This issue affects Fusion Page Builder : Extension &#8211; Gallery: from n/a through 1.7.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/
rough 1.7.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fusion-extension-gallery/vulnerability/wordpress-fusion-page-builder-extension-gallery-plugin-1-7-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58966 State: PUBLISHED Published: 2025-10-22T14:32:35.821Z Last Updated: 2025-11-13T10:33:42.928Z Vendors: Basix Products: NEX-Forms LITE Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms LITE nex-forms-lite allows Reflected XSS.This issue affects NEX-Forms LITE: from n/a through < 8.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/nex-forms-lite/vulnerability/wordpress-nex-forms-lite-plugin-8-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58967 State: PUBLISHED Published: 2025-10-22T14:32:36.057Z Last Updated: 2025-11-13T10:33:42.907Z Vendors: ThemeMove Products: Businext Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Businext businext allows PHP Local File Inclusion.This issue affects Businext: from n/a through < 2.4.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/businext/vulnerability/wordpress-businext-theme-2-4-4-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-58968 State: PUBLISHED Published: 2025-09-22T18:26:10.587Z Last Updated: 2025-09-23T17:48:53.728Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Christiaan Pieterse Products: MaxiBlocks Problem Types: CWE-862 Description: Missing Authorization vulnerability in Christiaan Pieterse MaxiBlocks allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MaxiBlocks: from n/a through 2.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/maxi-blocks/vulnerability/wordpress-maxiblocks-plugin-2-1-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58969 State: PUBLISHED Published: 2025-09-22T18:26:09.888Z Last Updated: 2025-09-23T14:11:17.285Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Greg Winiarski Products: Custom Login URL Problem Types: CWE-862 Description: Missing Authorization vulnerability in Greg Winiarski Custom Login URL allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Custom Login URL: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-login-url/vulnerability/wordpress-custom-login-url-plugin-1-0-2-broken-access-control-vulnerability
dpress/plugin/custom-login-url/vulnerability/wordpress-custom-login-url-plugin-1-0-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58970 State: PUBLISHED Published: 2025-10-22T14:32:36.243Z Last Updated: 2025-11-13T10:33:42.965Z Vendors: AmentoTech Products: Doctreat Problem Types: CWE-80 Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in AmentoTech Doctreat doctreat allows Code Injection.This issue affects Doctreat: from n/a through <= 1.6.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/doctreat/vulnerability/wordpress-doctreat-theme-1-6-7-content-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-58971 State: PUBLISHED Published: 2025-10-22T14:32:36.518Z Last Updated: 2025-11-13T10:33:42.897Z Vendors: AmentoTech Products: Doctreat Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AmentoTech Doctreat doctreat allows Reflected XSS.This issue affects Doctreat: from n/a through <= 1.6.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/doctreat/vulnerability/wordpress-doctreat-theme-1-6-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58972 State: PUBLISHED Published: 2025-11-06T15:54:30.300Z Last Updated: 2025-11-17T16:31:55.100Z Vendors: Dmitry V. (CEO of "UKR Solution") Products: Barcode Scanner with Inventory & Order Manager Problem Types: CWE-35 Description: Path Traversal: '.../...//' vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through <= 1.10.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/barcode-scanner-lite-pos
es: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/barcode-scanner-lite-pos-to-manage-products-inventory-and-orders/vulnerability/wordpress-barcode-scanner-with-inventory-order-manager-plugin-1-10-4-path-traversal-vulnerability?_s_id=cve
CVE ID: CVE-2025-58973 State: PUBLISHED Published: 2025-09-22T18:26:09.078Z Last Updated: 2025-09-23T14:11:22.291Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: hashthemes Products: Easy Elementor Addons Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in hashthemes Easy Elementor Addons allows PHP Local File Inclusion. This issue affects Easy Elementor Addons: from n/a through 2.2.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-elementor-addons/vulnerability/wordpress-easy-elementor
erences: - https://patchstack.com/database/wordpress/plugin/easy-elementor-addons/vulnerability/wordpress-easy-elementor-addons-plugin-2-2-8-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-58974 State: PUBLISHED Published: 2025-09-22T18:26:08.404Z Last Updated: 2025-09-23T17:49:02.747Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: StellarWP Products: WPComplete Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP WPComplete allows Stored XSS. This issue affects WPComplete: from n/a through 2.9.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpcomplete/vulnerability/wordpress-wpcomplete-plugin-2-9-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58975 State: PUBLISHED Published: 2025-09-09T16:33:19.818Z Last Updated: 2025-09-09T17:10:59.142Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Helmut Wandl Products: Advanced Settings Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Helmut Wandl Advanced Settings allows Cross Site Request Forgery. This issue affects Advanced Settings: from n/a through 3.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/advanced-settings/vulnerability/wordpress-advanced-settings-plugin-3-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58976 State: PUBLISHED Published: 2025-09-09T16:33:19.215Z Last Updated: 2025-09-09T17:24:34.891Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Equalize Digital Products: Accessibility Checker by Equalize Digital Problem Types: CWE-862 Description: Missing Authorization vulnerability in Equalize Digital Accessibility Checker by Equalize Digital allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Accessibility Checker by Equalize Digital: from n/a through 1.31.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/accessibility-checker/vuln
otes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/accessibility-checker/vulnerability/wordpress-accessibility-checker-by-equalize-digital-plugin-1-31-0-broken-access-control-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-58977 State: PUBLISHED Published: 2025-09-09T16:33:18.652Z Last Updated: 2025-09-09T17:26:59.282Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Rhys Wynne Products: WP eBay Product Feeds Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Rhys Wynne WP eBay Product Feeds allows Server Side Request Forgery. This issue affects WP eBay Product Feeds: from n/a through 3.4.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ebay-feeds-for-wordpress/vulnerability/wordpress-wp-ebay-product-feeds-plugin-3-4-8-server-side-request-forgery-ssrf-vulner
y-feeds-for-wordpress/vulnerability/wordpress-wp-ebay-product-feeds-plugin-3-4-8-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58978 State: PUBLISHED Published: 2025-09-09T16:33:18.016Z Last Updated: 2025-09-09T17:32:13.155Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: WP Swings Products: PDF Generator for WordPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in WP Swings PDF Generator for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF Generator for WordPress: from n/a through 1.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pdf-generator-for-wp/vulnerability/wordpress-pdf-generator-for-wordpress-plugin-1-5
hstack.com/database/wordpress/plugin/pdf-generator-for-wp/vulnerability/wordpress-pdf-generator-for-wordpress-plugin-1-5-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58979 State: PUBLISHED Published: 2025-09-09T16:33:17.357Z Last Updated: 2025-09-09T17:37:01.098Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: BerqWP Products: BerqWP Problem Types: CWE-862 Description: Missing Authorization vulnerability in BerqWP BerqWP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects BerqWP: from n/a through 2.2.53. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/searchpro/vulnerability/wordpress-berqwp-plugin-2-2-53-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58980 State: PUBLISHED Published: 2025-09-09T16:33:16.719Z Last Updated: 2025-09-09T17:45:27.311Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: recorp Products: Export WP Page to Static HTML/CSS Problem Types: CWE-862 Description: Missing Authorization vulnerability in recorp Export WP Page to Static HTML/CSS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Export WP Page to Static HTML/CSS: from n/a through 4.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/export-wp-page-to-static-html/vulnerability/wordpress-export-wp-page-to-static-
patchstack.com/database/wordpress/plugin/export-wp-page-to-static-html/vulnerability/wordpress-export-wp-page-to-static-html-css-plugin-4-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58981 State: PUBLISHED Published: 2025-09-09T16:33:16.157Z Last Updated: 2025-09-09T17:49:23.872Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Equalize Digital Products: Accessibility Checker by Equalize Digital Problem Types: CWE-862 Description: Missing Authorization vulnerability in Equalize Digital Accessibility Checker by Equalize Digital allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Accessibility Checker by Equalize Digital: from n/a through 1.31.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/accessibility-checker/vuln
otes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/accessibility-checker/vulnerability/wordpress-accessibility-checker-by-equalize-digital-plugin-1-31-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58982 State: PUBLISHED Published: 2025-09-09T16:33:15.530Z Last Updated: 2025-09-09T17:49:43.194Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: pixeline Products: Pixeline&#039;s Email Protector Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pixeline Pixeline&#039;s Email Protector allows Stored XSS. This issue affects Pixeline&#039;s Email Protector: from n/a through 1.3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pixelines-email-protector/vulnerability/wordpress-pixeline-s-emai
es: - https://patchstack.com/database/wordpress/plugin/pixelines-email-protector/vulnerability/wordpress-pixeline-s-email-protector-plugin-1-3-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58983 State: PUBLISHED Published: 2025-09-09T16:33:14.876Z Last Updated: 2025-09-10T17:27:42.897Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Stefano Lissa Products: Include Me Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stefano Lissa Include Me allows Stored XSS. This issue affects Include Me: from n/a through 1.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/include-me/vulnerability/wordpress-include-me-plugin-1-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58984 State: PUBLISHED Published: 2025-09-09T16:33:14.025Z Last Updated: 2025-09-10T17:28:11.020Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: nanbu Products: Welcart e-Commerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nanbu Welcart e-Commerce allows Stored XSS. This issue affects Welcart e-Commerce: from n/a through 2.11.20. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/usc-e-shop/vulnerability/wordpress-welcart-e-commerce-plugin-2-11-20-cross-site-scripting-xss-vulnerability?
ress/plugin/usc-e-shop/vulnerability/wordpress-welcart-e-commerce-plugin-2-11-20-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58985 State: PUBLISHED Published: 2025-09-09T16:33:12.994Z Last Updated: 2025-09-10T17:30:28.108Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WPFactory Products: Additional Custom Product Tabs for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Additional Custom Product Tabs for WooCommerce allows Stored XSS. This issue affects Additional Custom Product Tabs for WooCommerce: from n/a through 1.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/product-tabs-for-w
nalyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/product-tabs-for-woocommerce/vulnerability/wordpress-additional-custom-product-tabs-for-woocommerce-plugin-1-7-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58986 State: PUBLISHED Published: 2025-11-06T15:54:30.961Z Last Updated: 2025-11-17T16:11:39.686Z Vendors: ganddser Products: Jock On Air Now (JOAN) Problem Types: CWE-862 Description: Missing Authorization vulnerability in ganddser Jock On Air Now (JOAN) joan allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Jock On Air Now (JOAN): from n/a through <= 6.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/joan/vulnerability/wordpress-jock-on-air-now-joan-plugin-6-0-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58987 State: PUBLISHED Published: 2025-09-09T16:33:11.940Z Last Updated: 2025-09-10T17:30:51.312Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: AntoineH Products: Football Pool Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AntoineH Football Pool allows Stored XSS. This issue affects Football Pool: from n/a through 2.12.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/football-pool/vulnerability/wordpress-football-pool-plugin-2-12-6-cross-site-scripting-xss-vulnerability?_s_id=cve