Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-58195 State: PUBLISHED Published: 2025-08-27T17:45:40.585Z Last Updated: 2025-08-27T18:41:10.916Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Xpro Products: Xpro Elementor Addons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS. This issue affects Xpro Elementor Addons: from n/a through 1.4.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/xpro-elementor-addons/vulnerability/wordpress-xpro-elementor-addons-plugin-1-4-17-cross-site-scripting
/wordpress/plugin/xpro-elementor-addons/vulnerability/wordpress-xpro-elementor-addons-plugin-1-4-17-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58196 State: PUBLISHED Published: 2025-08-27T17:45:41.225Z Last Updated: 2025-08-27T18:36:34.103Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: uicore Products: UiCore Elements Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uicore UiCore Elements allows Stored XSS. This issue affects UiCore Elements: from n/a through 1.3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/uicore-elements/vulnerability/wordpress-uicore-elements-plugin-1-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58197 State: PUBLISHED Published: 2025-08-27T17:45:41.882Z Last Updated: 2025-08-27T18:34:38.087Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: mra13 / Team Tips and Tricks HQ Products: Simple Download Monitor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mra13 / Team Tips and Tricks HQ Simple Download Monitor allows Stored XSS. This issue affects Simple Download Monitor: from n/a through 3.9.34. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-download-monitor/vulnerability/word
Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-download-monitor/vulnerability/wordpress-simple-download-monitor-plugin-3-9-34-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58198 State: PUBLISHED Published: 2025-08-27T17:45:42.536Z Last Updated: 2025-08-27T18:32:54.195Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Xpro Products: Xpro Theme Builder Problem Types: CWE-862 Description: Missing Authorization vulnerability in Xpro Xpro Theme Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Xpro Theme Builder: from n/a through 1.2.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/xpro-theme-builder/vulnerability/wordpress-xpro-theme-builder-plugin-1-2-9-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58199 State: PUBLISHED Published: 2025-09-22T18:23:51.395Z Last Updated: 2025-09-23T16:10:31.251Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Fastly Products: Fastly Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Fastly Fastly allows Cross Site Request Forgery. This issue affects Fastly: from n/a through 1.2.28. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fastly/vulnerability/wordpress-fastly-plugin-1-2-28-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58200 State: PUBLISHED Published: 2025-09-22T18:23:50.528Z Last Updated: 2025-09-23T16:10:37.459Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Bage Products: Flexible FAQ Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Bage Flexible FAQ allows Cross Site Request Forgery. This issue affects Flexible FAQ: from n/a through 0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/flexible-faq/vulnerability/wordpress-flexible-faq-plugin-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58201 State: PUBLISHED Published: 2025-08-27T17:45:43.190Z Last Updated: 2025-08-27T18:29:32.434Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: AfterShip & Automizely Products: AfterShip Tracking Problem Types: CWE-862 Description: Missing Authorization vulnerability in AfterShip & Automizely AfterShip Tracking allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects AfterShip Tracking: from n/a through 1.17.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/aftership-woocommerce-tracking/vulnerability/wordpress-aftership-tracking-plugin-1-17-17-b
com/database/wordpress/plugin/aftership-woocommerce-tracking/vulnerability/wordpress-aftership-tracking-plugin-1-17-17-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58202 State: PUBLISHED Published: 2025-08-27T17:45:43.824Z Last Updated: 2025-08-27T18:54:15.066Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Plugins and Snippets Products: Simple Page Access Restriction Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Plugins and Snippets Simple Page Access Restriction allows Cross Site Request Forgery. This issue affects Simple Page Access Restriction: from n/a through 1.0.32. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-page-access-restriction/vulnerability/wordpress-simple-page-access-res
//patchstack.com/database/wordpress/plugin/simple-page-access-restriction/vulnerability/wordpress-simple-page-access-restriction-plugin-1-0-32-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58203 State: PUBLISHED Published: 2025-08-27T17:45:44.499Z Last Updated: 2025-08-27T18:26:47.706Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: solacewp Products: Solace Extra Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in solacewp Solace Extra allows Server Side Request Forgery. This issue affects Solace Extra: from n/a through 1.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/solace-extra/vulnerability/wordpress-solace-extra-plugin-1-3-2-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58204 State: PUBLISHED Published: 2025-08-27T17:45:45.516Z Last Updated: 2025-08-27T19:56:07.865Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: Eric Teubert Products: Podlove Podcast Publisher Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Eric Teubert Podlove Podcast Publisher allows Phishing. This issue affects Podlove Podcast Publisher: from n/a through 4.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/podlove-podcasting-plugin-for-wordpress/vulnerability/wordpress-podlove-podcast-publisher-plugin-4-2-5-open-r
ess/plugin/podlove-podcasting-plugin-for-wordpress/vulnerability/wordpress-podlove-podcast-publisher-plugin-4-2-5-open-redirection-vulnerability?_s_id=cve
CVE ID: CVE-2025-58205 State: PUBLISHED Published: 2025-08-27T17:45:46.238Z Last Updated: 2025-08-28T14:25:41.857Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Element Invader Products: ElementInvader Addons for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons for Elementor allows DOM-Based XSS. This issue affects ElementInvader Addons for Elementor: from n/a through 1.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/elementinvader-addons-for-elementor/
SA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/elementinvader-addons-for-elementor/vulnerability/wordpress-elementinvader-addons-for-elementor-plugin-1-3-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58206 State: PUBLISHED Published: 2025-09-05T16:18:13.178Z Last Updated: 2025-09-05T18:14:40.023Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ThemeMove Products: MaxCoach Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove MaxCoach allows PHP Local File Inclusion. This issue affects MaxCoach: from n/a through 3.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/maxcoach/vulnerability/wordpress-maxcoach-theme-3-2-5-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-58207 State: PUBLISHED Published: 2025-11-06T15:54:19.210Z Last Updated: 2025-11-13T10:33:42.603Z Vendors: WP Messiah Products: Ai Image Alt Text Generator for WP Problem Types: CWE-862 Description: Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image Alt Text Generator for WP: from n/a through <= 1.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/ai-image-alt-text-generator-for-wp/vulnerability/wordpress-ai-image-alt-text-generator-for-w
m/database/Wordpress/Plugin/ai-image-alt-text-generator-for-wp/vulnerability/wordpress-ai-image-alt-text-generator-for-wp-plugin-1-1-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58208 State: PUBLISHED Published: 2025-08-27T17:45:46.928Z Last Updated: 2025-08-27T19:29:33.666Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: add-ons.org Products: PDF for Elementor Forms + Drag And Drop Template Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder allows Stored XSS. This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through 6.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/w
om n/a through 6.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pdf-for-elementor-forms/vulnerability/wordpress-pdf-for-elementor-forms-drag-and-drop-template-builder-plugin-6-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58209 State: PUBLISHED Published: 2025-08-27T17:45:47.581Z Last Updated: 2025-08-27T19:03:18.135Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: rtCamp Products: Transcoder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtCamp Transcoder allows Stored XSS. This issue affects Transcoder: from n/a through 1.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/transcoder/vulnerability/wordpress-transcoder-plugin-1-4-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58210 State: PUBLISHED Published: 2025-09-03T06:58:57.138Z Last Updated: 2025-09-03T19:34:45.707Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: ThemeMove Products: Makeaholic Problem Types: CWE-862 Description: Missing Authorization vulnerability in ThemeMove Makeaholic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Makeaholic: from n/a through 1.8.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/makeaholic/vulnerability/wordpress-makeaholic-theme-1-8-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58211 State: PUBLISHED Published: 2025-08-27T17:45:48.240Z Last Updated: 2025-08-27T18:52:13.498Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: alexvtn Products: Chatbox Manager Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in alexvtn Chatbox Manager allows Stored XSS. This issue affects Chatbox Manager: from n/a through 1.2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wa-chatbox-manager/vulnerability/wordpress-chatbox-manager-plugin-1-2-6-cross-site-scripting-xss-vulnerability?_s_i
ugin/wa-chatbox-manager/vulnerability/wordpress-chatbox-manager-plugin-1-2-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58212 State: PUBLISHED Published: 2025-08-27T17:45:48.980Z Last Updated: 2025-08-27T18:40:24.566Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: epeken Products: Epeken All Kurir Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in epeken Epeken All Kurir allows DOM-Based XSS. This issue affects Epeken All Kurir: from n/a through 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/epeken-all-kurir/vulnerability/wordpress-epeken-all-kurir-plugin-2-0-1-cross-site-scripting-xss-vulnerability?_
s/plugin/epeken-all-kurir/vulnerability/wordpress-epeken-all-kurir-plugin-2-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58213 State: PUBLISHED Published: 2025-08-27T17:45:49.658Z Last Updated: 2025-08-27T18:14:24.907Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: ameliabooking Products: Booking System Trafft Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ameliabooking Booking System Trafft allows Stored XSS. This issue affects Booking System Trafft: from n/a through 1.0.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/booking-system-trafft/vulnerability/wordpress-booking-system-trafft-plugin-1-0-14-cr
stack.com/database/wordpress/plugin/booking-system-trafft/vulnerability/wordpress-booking-system-trafft-plugin-1-0-14-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58214 State: PUBLISHED Published: 2025-09-05T16:18:12.665Z Last Updated: 2025-09-05T18:17:27.458Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: gavias Products: Indutri Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Indutri allows PHP Local File Inclusion. This issue affects Indutri: from n/a through n/a. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/indutri/vulnerability/wordpress-indutri-theme-1-3-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-58215 State: PUBLISHED Published: 2025-09-09T16:26:04.720Z Last Updated: 2025-09-09T18:40:10.975Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: gavias Products: Ziston Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Ziston allows PHP Local File Inclusion. This issue affects Ziston: from n/a through n/a. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/ziston/vulnerability/wordpress-ziston-theme-1-4-5-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-58216 State: PUBLISHED Published: 2025-08-27T17:45:50.336Z Last Updated: 2025-08-27T18:05:07.873Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: jgwhite33 Products: WP Thumbtack Review Slider Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgwhite33 WP Thumbtack Review Slider allows Stored XSS. This issue affects WP Thumbtack Review Slider: from n/a through 2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-thumbtack-review-slider/vulnerability/wordpress-wp-thumbtack-review-slider-pl
atchstack.com/database/wordpress/plugin/wp-thumbtack-review-slider/vulnerability/wordpress-wp-thumbtack-review-slider-plugin-2-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58217 State: PUBLISHED Published: 2025-08-27T17:45:50.965Z Last Updated: 2025-08-27T18:04:52.998Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: GeroNikolov Products: Instant Breaking News Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in GeroNikolov Instant Breaking News allows Stored XSS. This issue affects Instant Breaking News: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/instant-breaking-news/vulnerability/wordpress-instant-breaking-news-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58218 State: PUBLISHED Published: 2025-08-27T17:45:51.650Z Last Updated: 2025-08-27T18:03:21.814Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: enituretechnology Products: Small Package Quotes – USPS Edition Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in enituretechnology Small Package Quotes – USPS Edition allows Object Injection. This issue affects Small Package Quotes – USPS Edition: from n/a through 1.3.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/small-package-quotes-usps-edition/vulnerability/wordpress-small-package-quotes-us
tchstack.com/database/wordpress/plugin/small-package-quotes-usps-edition/vulnerability/wordpress-small-package-quotes-usps-edition-plugin-1-3-9-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-58219 State: PUBLISHED Published: 2025-09-22T18:23:49.798Z Last Updated: 2025-09-23T16:10:43.910Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: LIJE Products: Show Pages List Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in LIJE Show Pages List allows Cross Site Request Forgery. This issue affects Show Pages List: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/show-pages-list/vulnerability/wordpress-show-pages-list-plugin-1-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58220 State: PUBLISHED Published: 2025-09-22T18:23:49.105Z Last Updated: 2025-09-23T16:10:50.260Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Techeshta Products: Card Elements for WPBakery Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Techeshta Card Elements for WPBakery allows DOM-Based XSS. This issue affects Card Elements for WPBakery: from n/a through 1.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/card-elements-for-wpbakery/vulnerability/wordpress-card-elements-for-wpbake
s://patchstack.com/database/wordpress/plugin/card-elements-for-wpbakery/vulnerability/wordpress-card-elements-for-wpbakery-plugin-1-0-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58221 State: PUBLISHED Published: 2025-09-22T18:23:48.408Z Last Updated: 2025-09-23T16:10:56.332Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: ONTRAPORT Products: PilotPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in ONTRAPORT PilotPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PilotPress: from n/a through 2.0.35. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pilotpress/vulnerability/wordpress-pilotpress-plugin-2-0-35-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58222 State: PUBLISHED Published: 2025-09-22T18:23:47.637Z Last Updated: 2025-09-23T16:11:03.686Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Maidul Products: Team Manager Problem Types: CWE-862 Description: Missing Authorization vulnerability in Maidul Team Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Team Manager: from n/a through 2.3.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-team-manager/vulnerability/wordpress-team-manager-plugin-2-3-14-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58223 State: PUBLISHED Published: 2025-09-22T18:23:46.209Z Last Updated: 2025-09-23T14:45:48.541Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Chris Taylor Products: VoucherPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Taylor VoucherPress allows Stored XSS. This issue affects VoucherPress: from n/a through 1.5.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/voucherpress/vulnerability/wordpress-voucherpress-plugin-1-5-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58224 State: PUBLISHED Published: 2025-09-22T18:23:46.918Z Last Updated: 2025-09-23T14:45:17.122Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Printeers Products: Printeers Print & Ship Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Printeers Printeers Print & Ship allows Cross Site Request Forgery. This issue affects Printeers Print & Ship: from n/a through 1.17.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/invition-print-ship/vulnerability/wordpress-printeers-print-ship-plugin-1-17-0-cross-site-request-forgery-csrf-vulnerabilit
ition-print-ship/vulnerability/wordpress-printeers-print-ship-plugin-1-17-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58226 State: PUBLISHED Published: 2025-09-22T18:23:45.494Z Last Updated: 2025-09-23T14:47:30.834Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: iberezansky Products: 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery allows Retrieve Embedded Sensitive Data. This issue affects 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery: from n/a through 1.16.16. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpres
rough 1.16.16. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/interactive-3d-flipbook-powered-physics-engine/vulnerability/wordpress-3d-flipbook-pdf-flipbook-viewer-flipbook-image-gallery-plugin-1-16-16-sensitive-data-exposure-vulnerability?_s_id=cve