Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-31382 State: PUBLISHED Published: 2025-04-09T16:10:07.904Z Last Updated: 2025-04-09T17:50:18.277Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: theode Products: Language Field Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in theode Language Field allows Stored XSS. This issue affects Language Field: from n/a through 0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/language-field/vulnerability/wordpress-language-field-plugin-0-9-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31383 State: PUBLISHED Published: 2025-04-09T16:13:33.869Z Last Updated: 2025-04-09T17:51:51.889Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: sodena Products: FrescoChat Live Chat Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in FrescoChat Live Chat allows Stored XSS. This issue affects FrescoChat Live Chat: from n/a through 3.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/flexytalk-widget/vulnerability/wordpress-frescochat-live-chat-plugin-3-2-6-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31384 State: PUBLISHED Published: 2025-04-04T13:43:15.491Z Last Updated: 2025-04-04T14:31:21.692Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Aviplugins Products: Videos Problem Types: CWE-80 Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Aviplugins Videos allows Reflected XSS.This issue affects Videos: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/videos/vulnerability/wordpress-videos-plugin-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31385 State: PUBLISHED Published: 2025-04-09T16:13:33.162Z Last Updated: 2025-04-09T17:52:16.825Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: intelcaprep Products: Site Table of Contents Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Site Table of Contents allows Stored XSS. This issue affects Site Table of Contents: from n/a through 0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/site-table-of-contents/vulnerability/wordpress-site-table-of-contents-plugin-0-3-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31386 State: PUBLISHED Published: 2025-03-31T09:32:20.296Z Last Updated: 2025-03-31T12:42:24.076Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Simplepress Products: Simple:Press Problem Types: CWE-862 Description: Missing Authorization vulnerability in Simplepress Simple:Press allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple:Press: from n/a through 6.10.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simplepress/vulnerability/wordpress-simple-press-plugin-6-10-11-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31387 State: PUBLISHED Published: 2025-03-31T06:07:11.377Z Last Updated: 2025-03-31T14:22:09.118Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: InstaWP Products: InstaWP Connect Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in InstaWP InstaWP Connect allows PHP Local File Inclusion. This issue affects InstaWP Connect: from n/a through 0.1.0.82. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/instawp-connect/vulnerability/wordpress-instawp-connect-plugin-0-1-0-82-local-fil
tchstack.com/database/wordpress/plugin/instawp-connect/vulnerability/wordpress-instawp-connect-plugin-0-1-0-82-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-31388 State: PUBLISHED Published: 2025-04-09T16:10:05.955Z Last Updated: 2025-04-09T17:50:37.732Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: doa Products: The World Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in doa The World allows Stored XSS. This issue affects The World: from n/a through 0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/the-world/vulnerability/wordpress-the-world-plugin-0-4-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31389 State: PUBLISHED Published: 2025-04-04T13:36:50.506Z Last Updated: 2025-04-04T14:31:42.098Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: sequel.io Products: Sequel Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sequel.Io Sequel allows Reflected XSS.This issue affects Sequel: from n/a through 1.0.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sequel/vulnerability/wordpress-sequel-plugin-1-0-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31390 State: PUBLISHED Published: 2025-04-09T16:10:05.098Z Last Updated: 2025-04-09T17:51:49.969Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: bdoga Products: Social Crowd Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in bdoga Social Crowd allows Stored XSS. This issue affects Social Crowd: from n/a through 0.9.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/social-crowd/vulnerability/wordpress-social-crowd-plugin-0-9-6-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31391 State: PUBLISHED Published: 2025-04-09T16:10:04.247Z Last Updated: 2025-04-09T17:52:02.086Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: regen Products: Script Compressor Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in regen Script Compressor allows Stored XSS. This issue affects Script Compressor: from n/a through 1.7.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/script-compressor/vulnerability/wordpress-script-compressor-plugin-1-7-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31392 State: PUBLISHED Published: 2025-04-09T16:10:03.600Z Last Updated: 2025-04-09T17:54:10.172Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Shameem Reza Products: Smart Product Gallery Slider Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Shameem Reza Smart Product Gallery Slider allows Cross Site Request Forgery. This issue affects Smart Product Gallery Slider: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smart-product-gallery-slider/vulnerability/wordpress-smart-product-gallery-slider-plugin-1-0-4-csrf-to
/wordpress/plugin/smart-product-gallery-slider/vulnerability/wordpress-smart-product-gallery-slider-plugin-1-0-4-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31393 State: PUBLISHED Published: 2025-04-09T16:10:02.869Z Last Updated: 2025-04-09T17:54:40.084Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: vfvalent Products: Social Bookmarking RELOADED Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in vfvalent Social Bookmarking RELOADED allows Stored XSS. This issue affects Social Bookmarking RELOADED: from n/a through 3.18. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/social-bookmarking-reloaded/vulnerability/wordpress-social-bookmarking-reloaded-plugin-3-18-csrf-to-stored-xss-vulnerability?_s_id
kmarking-reloaded/vulnerability/wordpress-social-bookmarking-reloaded-plugin-3-18-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31394 State: PUBLISHED Published: 2025-04-09T16:10:02.000Z Last Updated: 2025-04-09T17:55:03.223Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Kailey (trepmal) Products: More Mime Type Filters Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kailey (trepmal) More Mime Type Filters allows Stored XSS. This issue affects More Mime Type Filters: from n/a through 0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/more-mime-type-filters/vulnerability/wordpress-more-mime-type-filters-plugin-0-3
atchstack.com/database/wordpress/plugin/more-mime-type-filters/vulnerability/wordpress-more-mime-type-filters-plugin-0-3-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31395 State: PUBLISHED Published: 2025-04-09T16:10:00.929Z Last Updated: 2025-04-09T17:55:25.151Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: a.ankit Products: Easy Custom CSS Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in a.ankit Easy Custom CSS allows Stored XSS. This issue affects Easy Custom CSS: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-custom-css/vulnerability/wordpress-easy-custom-css-plugin-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31396 State: PUBLISHED Published: 2025-06-09T15:56:40.939Z Last Updated: 2025-06-09T17:22:29.694Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: themeton Products: FLAP - Business WordPress Theme Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in themeton FLAP - Business WordPress Theme allows Object Injection. This issue affects FLAP - Business WordPress Theme: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/flap/vulnerability/wordpress-flap-business-wordpress-theme-1-5-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31397 State: PUBLISHED Published: 2025-05-23T12:44:07.240Z Last Updated: 2025-05-23T13:22:08.744Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: smartcms Products: Bus Ticket Booking with Seat Reservation for WooCommerce Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in smartcms Bus Ticket Booking with Seat Reservation for WooCommerce allows SQL Injection. This issue affects Bus Ticket Booking with Seat Reservation for WooCommerce: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/word
m n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/scw-bus-seat-reservation/vulnerability/wordpress-bus-ticket-booking-with-seat-reservation-for-woocommerce-plugin-1-7-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31398 State: PUBLISHED Published: 2025-06-09T15:56:40.019Z Last Updated: 2025-06-09T17:22:36.549Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: themeton Products: PIMP - Creative MultiPurpose Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in themeton PIMP - Creative MultiPurpose allows Object Injection. This issue affects PIMP - Creative MultiPurpose: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/pimp/vulnerability/wordpress-pimp-creative-multipurpose-1-7-deserialization-of-untrusted-data-vulnerability?_s_id=cve
CVE ID: CVE-2025-31399 State: PUBLISHED Published: 2025-04-09T16:10:00.303Z Last Updated: 2025-04-09T17:55:46.838Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Chandan Garg Products: CG Scroll To Top Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Chandan Garg CG Scroll To Top allows Stored XSS. This issue affects CG Scroll To Top: from n/a through 3.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cg-scroll-to-top/vulnerability/wordpress-cg-scroll-to-top-plugin-3-5-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31400 State: PUBLISHED Published: 2025-04-09T16:09:59.594Z Last Updated: 2025-04-09T17:56:06.727Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: icyleaf Products: WS Audio Player Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in icyleaf WS Audio Player allows Stored XSS. This issue affects WS Audio Player: from n/a through 1.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ws-audio-player/vulnerability/wordpress-ws-audio-player-plugin-1-1-8-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31401 State: PUBLISHED Published: 2025-04-09T16:09:58.891Z Last Updated: 2025-04-09T17:56:24.445Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: mmetrodw Products: MMX &#8211; Make Me Christmas Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in mmetrodw MMX &#8211; Make Me Christmas allows Stored XSS. This issue affects MMX &#8211; Make Me Christmas: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mmx-make-me-christmas/vulnerability/wordpress-mmx-make-me-christmas-plugin-1-0-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31402 State: PUBLISHED Published: 2025-04-09T16:09:58.306Z Last Updated: 2025-04-09T17:57:28.540Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NewsBoard Plugin Products: NewsBoard Post and RSS Scroller Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in NewsBoard Plugin NewsBoard Post and RSS Scroller allows Stored XSS. This issue affects NewsBoard Post and RSS Scroller: from n/a through 1.2.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/newsboard/vulnerability/wordpress-newsboard-post-and-rss-scroller-plugin-1-2-12-csrf-to-stored-xss-v
se/wordpress/plugin/newsboard/vulnerability/wordpress-newsboard-post-and-rss-scroller-plugin-1-2-12-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31403 State: PUBLISHED Published: 2025-04-04T13:34:42.539Z Last Updated: 2025-04-04T14:31:55.215Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: shiptrack Products: Booking Calendar and Notification Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shiptrack Booking Calendar and Notification allows Blind SQL Injection.This issue affects Booking Calendar and Notification: from n/a through 4.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/booking-calendar-and-notification/vulnerability
richment: References: - https://patchstack.com/database/wordpress/plugin/booking-calendar-and-notification/vulnerability/wordpress-booking-calendar-and-notification-plugin-4-0-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31404 State: PUBLISHED Published: 2025-04-09T16:09:57.664Z Last Updated: 2025-04-09T17:57:39.540Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Wladyslaw Madejczyk Products: AF Tell a Friend Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Wladyslaw Madejczyk AF Tell a Friend allows Stored XSS. This issue affects AF Tell a Friend: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/af-tell-a-friend/vulnerability/wordpress-af-tell-a-friend-plugin-1-4-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31405 State: PUBLISHED Published: 2025-04-04T13:26:10.946Z Last Updated: 2025-04-04T13:41:07.021Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: zankover Products: Fami WooCommerce Compare Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zankover Fami WooCommerce Compare allows PHP Local File Inclusion.This issue affects Fami WooCommerce Compare: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fami-woocommerce-compare/vulnerability/wordpress-fami-wo
References: - https://patchstack.com/database/wordpress/plugin/fami-woocommerce-compare/vulnerability/wordpress-fami-woocommerce-compare-plugin-1-0-5-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-31406 State: PUBLISHED Published: 2025-03-31T08:34:52.142Z Last Updated: 2025-03-31T16:11:59.864Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: ELEXtensions Products: ELEX WooCommerce Request a Quote Problem Types: CWE-862 Description: Subscriber Broken Access Control in ELEX WooCommerce Request a Quote <= 2.3.3 versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/elex-request-a-quote/vulnerability/wordpress-elex-woocommerce-request-a-quote-plugin-2-3-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31407 State: PUBLISHED Published: 2025-04-04T13:24:56.744Z Last Updated: 2025-04-04T13:41:28.955Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: hutsixdigital Products: Tiger Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hutsixdigital Tiger allows Stored XSS.This issue affects Tiger: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/tiger/vulnerability/wordpress-tiger-theme-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31408 State: PUBLISHED Published: 2025-04-01T13:07:54.459Z Last Updated: 2025-04-01T15:22:28.816Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Zoho Flow Products: Zoho Flow Problem Types: CWE-862 Description: Missing Authorization vulnerability in Zoho Flow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zoho Flow: from n/a through 2.13.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/zoho-flow/vulnerability/wordpress-zoho-flow-plugin-2-13-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31409 State: PUBLISHED Published: 2025-04-01T05:32:24.989Z Last Updated: 2025-04-01T15:08:54.501Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Bridge Core Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Bridge Core allows Stored XSS. This issue affects Bridge Core: from n/a through n/a. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bridge-core/vulnerability/wordpress-bridge-core-plugin-3-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31410 State: PUBLISHED Published: 2025-03-31T08:29:07.022Z Last Updated: 2025-03-31T15:42:30.468Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Ashish Ajani Products: WP Church Donation Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ashish Ajani WP Church Donation allows Cross Site Request Forgery.This issue affects WP Church Donation: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-church-donation/vulnerability/wordpress-wp-church-donation-plugin-1-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31411 State: PUBLISHED Published: 2025-04-10T10:16:12.191Z Last Updated: 2025-04-10T13:52:01.044Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Aribhour Products: Linet ERP-Woocommerce Integration Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Aribhour Linet ERP-Woocommerce Integration allows Path Traversal.This issue affects Linet ERP-Woocommerce Integration: from n/a through 3.5.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/linet-erp-woocommerce-integration/vulnerability/wordpress-lin
rences: - https://patchstack.com/database/wordpress/plugin/linet-erp-woocommerce-integration/vulnerability/wordpress-linet-erp-woocommerce-integration-plugin-3-5-12-arbitrary-file-read-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-31412 State: PUBLISHED Published: 2025-03-31T06:07:11.670Z Last Updated: 2025-03-31T14:21:39.513Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: JetProductGallery Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound JetProductGallery allows DOM-Based XSS. This issue affects JetProductGallery: from n/a through 2.1.22. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/jet-woo-product-gallery/vulnerability/wordpress-jetproductgallery-plugin-2-1-22-cross-site-scripting-xs
wordpress/plugin/jet-woo-product-gallery/vulnerability/wordpress-jetproductgallery-plugin-2-1-22-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31414 State: PUBLISHED Published: 2025-03-31T06:07:11.895Z Last Updated: 2025-03-31T12:51:18.147Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Stylemix Products: Cost Calculator Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stylemix Cost Calculator Builder allows Stored XSS. This issue affects Cost Calculator Builder: from n/a through 3.2.65. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cost-calculator-builder/vulnerability/wordpress-cost-calculator-builder-plugin-3-2-65-cr
k.com/database/wordpress/plugin/cost-calculator-builder/vulnerability/wordpress-cost-calculator-builder-plugin-3-2-65-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31415 State: PUBLISHED Published: 2025-04-01T05:31:42.561Z Last Updated: 2025-04-01T13:36:24.669Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: YayCommerce Products: YayExtra Problem Types: CWE-862 Description: Missing Authorization vulnerability in YayCommerce YayExtra allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects YayExtra: from n/a through 1.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/yayextra/vulnerability/wordpress-yayextra-1-5-2-broken-access-control-vulnerability?_s_id=cve