Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-31725 State: PUBLISHED Published: 2025-04-02T14:59:52.475Z Last Updated: 2025-04-03T20:18:31.242Z Vendors: Jenkins Project Products: Jenkins monitor-remote-job Plugin Description: Jenkins monitor-remote-job Plugin 1.0 stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3539
CVE ID: CVE-2025-31726 State: PUBLISHED Published: 2025-04-02T14:59:53.108Z Last Updated: 2025-04-03T20:19:11.827Z Vendors: Jenkins Project Products: Jenkins Stack Hammer Plugin Description: Jenkins Stack Hammer Plugin 1.0.6 and earlier stores Stack Hammer API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3520
CVE ID: CVE-2025-31727 State: PUBLISHED Published: 2025-04-02T14:59:53.687Z Last Updated: 2025-04-03T20:19:52.127Z Vendors: Jenkins Project Products: Jenkins AsakusaSatellite Plugin Description: Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3523
CVE ID: CVE-2025-31728 State: PUBLISHED Published: 2025-04-02T14:59:54.247Z Last Updated: 2025-04-03T20:20:27.891Z Vendors: Jenkins Project Products: Jenkins AsakusaSatellite Plugin Description: Jenkins AsakusaSatellite Plugin 0.1.1 and earlier does not mask AsakusaSatellite API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3523
CVE ID: CVE-2025-31729 State: PUBLISHED Published: 2025-04-03T13:27:12.479Z Last Updated: 2025-04-03T15:06:49.005Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: jeffikus Products: WooTumblog Problem Types: CWE-862 Description: Missing Authorization vulnerability in jeffikus WooTumblog allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WooTumblog: from n/a through 2.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woo-tumblog/vulnerability/wordpress-wootumblog-plugin-2-1-4-content-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31730 State: PUBLISHED Published: 2025-04-01T14:51:01.189Z Last Updated: 2025-04-02T15:53:11.915Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: DigitalCourt Products: Marketer Addons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DigitalCourt Marketer Addons allows Stored XSS. This issue affects Marketer Addons: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/marketer-addons/vulnerability/wordpress-marketer-addons-plugin-1-0-1-stored-cross-site-scripting-xss-vuln
rdpress/plugin/marketer-addons/vulnerability/wordpress-marketer-addons-plugin-1-0-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31731 State: PUBLISHED Published: 2025-04-01T14:51:01.844Z Last Updated: 2025-04-02T15:50:31.141Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Philip John Products: Author Bio Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Philip John Author Bio Shortcode allows Stored XSS. This issue affects Author Bio Shortcode: from n/a through 2.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/author-bio-shortcode/vulnerability/wordpress-author-bio-shortcode-plugin-2-5-3-cross-site-sc
m/database/wordpress/plugin/author-bio-shortcode/vulnerability/wordpress-author-bio-shortcode-plugin-2-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31732 State: PUBLISHED Published: 2025-04-01T14:51:02.397Z Last Updated: 2025-04-01T20:37:21.906Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: gb-plugins Products: GB Gallery Slideshow Problem Types: CWE-862 Description: Missing Authorization vulnerability in gb-plugins GB Gallery Slideshow allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GB Gallery Slideshow: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gb-gallery-slideshow/vulnerability/wordpress-gb-gallery-slideshow-plugin-1-3-broken-access-control-vulne
ordpress/plugin/gb-gallery-slideshow/vulnerability/wordpress-gb-gallery-slideshow-plugin-1-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31733 State: PUBLISHED Published: 2025-04-01T14:51:02.929Z Last Updated: 2025-04-01T20:37:14.113Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Boot Div Products: WP Sitemap Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Boot Div WP Sitemap allows Stored XSS. This issue affects WP Sitemap: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpsitemap/vulnerability/wordpress-wp-sitemap-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31734 State: PUBLISHED Published: 2025-04-01T14:51:03.501Z Last Updated: 2025-04-01T20:37:07.477Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Syed Balkhi Products: Simple Post Expiration Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Balkhi Simple Post Expiration allows DOM-Based XSS. This issue affects Simple Post Expiration: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-post-expiration/vulnerability/wordpress-simple-post-expiration-plugin-1-0-1-
hstack.com/database/wordpress/plugin/simple-post-expiration/vulnerability/wordpress-simple-post-expiration-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31735 State: PUBLISHED Published: 2025-04-01T14:51:04.093Z Last Updated: 2025-04-01T20:36:58.065Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: C. Johnson Products: Footnotes for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in C. Johnson Footnotes for WordPress allows Stored XSS. This issue affects Footnotes for WordPress: from n/a through 2016.1230. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/footnotes-for-wordpress/vulnerability/wordpress-footnotes-for-wordpress-plugin-20
tchstack.com/database/wordpress/plugin/footnotes-for-wordpress/vulnerability/wordpress-footnotes-for-wordpress-plugin-2016-1230-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31736 State: PUBLISHED Published: 2025-04-03T13:27:12.701Z Last Updated: 2025-04-03T15:06:35.668Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: richtexteditor Products: Rich Text Editor Problem Types: CWE-862 Description: Missing Authorization vulnerability in richtexteditor Rich Text Editor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Rich Text Editor: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/richtexteditor/vulnerability/wordpress-rich-text-editor-plugin-1-0-1-broken-access-control-vulnerability?_
dpress/plugin/richtexteditor/vulnerability/wordpress-rich-text-editor-plugin-1-0-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31737 State: PUBLISHED Published: 2025-04-01T14:51:04.637Z Last Updated: 2025-04-01T20:36:51.057Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: dxladner Products: Client Showcase Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dxladner Client Showcase allows Stored XSS. This issue affects Client Showcase: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/client-showcase/vulnerability/wordpress-client-showcase-plugin-1-2-0-stored-cross-site-scripting-xss-vulnerabilit
plugin/client-showcase/vulnerability/wordpress-client-showcase-plugin-1-2-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31738 State: PUBLISHED Published: 2025-04-01T14:51:05.140Z Last Updated: 2025-04-01T20:36:42.849Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: yazamodeveloper Products: LeadQuizzes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yazamodeveloper LeadQuizzes allows Stored XSS. This issue affects LeadQuizzes: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/leadquizzes/vulnerability/wordpress-leadquizzes-plugin-1-1-0-stored-cross-site-scripting-xss-vulnerability?_s_i
s/plugin/leadquizzes/vulnerability/wordpress-leadquizzes-plugin-1-1-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31739 State: PUBLISHED Published: 2025-04-03T13:27:12.872Z Last Updated: 2025-04-03T15:06:26.916Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: Manuel Schmalstieg Products: Minimalistic Event Manager Problem Types: CWE-862 Description: Missing Authorization vulnerability in Manuel Schmalstieg Minimalistic Event Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Minimalistic Event Manager: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/minimalistic-event-manager/vulnerability/wordpress-minimalistic-even
- https://patchstack.com/database/wordpress/plugin/minimalistic-event-manager/vulnerability/wordpress-minimalistic-event-manager-plugin-1-1-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31740 State: PUBLISHED Published: 2025-04-01T14:51:05.676Z Last Updated: 2025-04-02T15:49:34.265Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: aThemeArt Products: News, Magazine and Blog Elements Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aThemeArt News, Magazine and Blog Elements allows Stored XSS. This issue affects News, Magazine and Blog Elements: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/news-magazine-and-blog-elements/vulnerability/wordpress-news-m
ences: - https://patchstack.com/database/wordpress/plugin/news-magazine-and-blog-elements/vulnerability/wordpress-news-magazine-and-blog-elements-plugin-1-3-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31741 State: PUBLISHED Published: 2025-04-01T14:51:06.199Z Last Updated: 2025-04-02T15:48:59.985Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Filtr8 Products: Easy Magazine Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Filtr8 Easy Magazine allows DOM-Based XSS. This issue affects Easy Magazine: from n/a through 2.1.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/filtr8-magazine/vulnerability/wordpress-easy-magazine-plugin-2-1-13-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31742 State: PUBLISHED Published: 2025-04-01T14:51:06.707Z Last Updated: 2025-04-02T15:48:33.667Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: PixelDima Products: Dima Take Action Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PixelDima Dima Take Action allows Stored XSS. This issue affects Dima Take Action: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dima-take-action/vulnerability/wordpress-dima-take-action-plugin-1-0-5-cross-site-scripting-xss-vulnerabilit
ress/plugin/dima-take-action/vulnerability/wordpress-dima-take-action-plugin-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31743 State: PUBLISHED Published: 2025-04-01T14:51:07.208Z Last Updated: 2025-04-02T15:47:41.190Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: wpszaki Products: Lightweight and Responsive Youtube Embed Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpszaki Lightweight and Responsive Youtube Embed allows Stored XSS. This issue affects Lightweight and Responsive Youtube Embed: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/lightweight-and-responsive-youtube-embed
DP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/lightweight-and-responsive-youtube-embed/vulnerability/wordpress-lightweight-and-responsive-youtube-embed-plugin-1-0-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31744 State: PUBLISHED Published: 2025-04-01T14:51:07.706Z Last Updated: 2025-04-02T15:47:10.467Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: wpszaki Products: Lightweight and Responsive Youtube Embed Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpszaki Lightweight and Responsive Youtube Embed allows Stored XSS. This issue affects Lightweight and Responsive Youtube Embed: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/lightweight-and-responsive-youtube-embed
DP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/lightweight-and-responsive-youtube-embed/vulnerability/wordpress-lightweight-and-responsive-youtube-embed-plugin-1-0-0-stored-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-31745 State: PUBLISHED Published: 2025-04-01T14:51:08.224Z Last Updated: 2025-04-02T15:45:33.614Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Arni Cinco Products: Subscription Form for Feedblitz Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arni Cinco Subscription Form for Feedblitz allows Stored XSS. This issue affects Subscription Form for Feedblitz: from n/a through 1.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/feedblitz-email-subscription/vulnerability/wordpress-subscrip
rences: - https://patchstack.com/database/wordpress/plugin/feedblitz-email-subscription/vulnerability/wordpress-subscription-form-for-feedblitz-plugin-1-0-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31746 State: PUBLISHED Published: 2025-04-03T13:27:13.078Z Last Updated: 2025-04-03T15:06:16.058Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: Think201 Products: Clients Problem Types: CWE-862 Description: Missing Authorization vulnerability in Think201 Clients allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Clients: from n/a through 1.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/clients/vulnerability/wordpress-clients-plugin-1-1-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31747 State: PUBLISHED Published: 2025-04-01T14:51:08.737Z Last Updated: 2025-04-02T15:44:33.020Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: milan.latinovic Products: WP Chrono Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in milan.latinovic WP Chrono allows DOM-Based XSS. This issue affects WP Chrono: from n/a through 1.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-chrono/vulnerability/wordpress-wp-chrono-plugin-1-5-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31748 State: PUBLISHED Published: 2025-04-01T14:51:09.239Z Last Updated: 2025-04-02T15:37:51.246Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: wpopal Products: Opal Portfolio Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpopal Opal Portfolio allows Stored XSS. This issue affects Opal Portfolio: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/opal-portfolios/vulnerability/wordpress-opal-portfolio-plugin-1-0-4-stored-cross-site-scripting-xss-vulnerability?_s_id=
opal-portfolios/vulnerability/wordpress-opal-portfolio-plugin-1-0-4-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31749 State: PUBLISHED Published: 2025-04-01T14:51:09.768Z Last Updated: 2025-04-02T15:35:14.453Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WPelite Products: HMH Footer Builder For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPelite HMH Footer Builder For Elementor allows Stored XSS. This issue affects HMH Footer Builder For Elementor: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hmh-footer-builder-for-elementor/vulnerability/wordpress-hmh-foote
s: - https://patchstack.com/database/wordpress/plugin/hmh-footer-builder-for-elementor/vulnerability/wordpress-hmh-footer-builder-for-elementor-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31750 State: PUBLISHED Published: 2025-04-01T14:51:10.293Z Last Updated: 2025-04-02T15:32:15.950Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: doit Products: Breaking News WP Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in doit Breaking News WP allows Stored XSS. This issue affects Breaking News WP: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/breaking-news-wp/vulnerability/wordpress-breaking-news-wp-plugin-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31751 State: PUBLISHED Published: 2025-04-01T14:51:10.966Z Last Updated: 2025-04-01T20:36:35.551Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: doit Products: Breaking News WP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in doit Breaking News WP allows Cross Site Request Forgery. This issue affects Breaking News WP: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/breaking-news-wp/vulnerability/wordpress-breaking-news-wp-plugin-1-3-csrf-to-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-31752 State: PUBLISHED Published: 2025-04-01T14:51:11.583Z Last Updated: 2025-04-01T20:36:27.579Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: termel Products: Bulk Fields Editor Problem Types: CWE-862 Description: Missing Authorization vulnerability in termel Bulk Fields Editor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Bulk Fields Editor: from n/a through 1.8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bulk-user-editor/vulnerability/wordpress-bulk-fields-editor-plugin-1-8-0-broken-access-control-vulnerability?_s_id=c
gin/bulk-user-editor/vulnerability/wordpress-bulk-fields-editor-plugin-1-8-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31753 State: PUBLISHED Published: 2025-04-01T20:42:09.765Z Last Updated: 2025-04-02T13:26:11.678Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Animesh Kumar Products: Advanced Speed Increaser Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Animesh Kumar Advanced Speed Increaser. This issue affects Advanced Speed Increaser: from n/a through 2.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/advanced-speed-increaser/vulnerability/wordpress-advanced-speed-increaser-plugin-2-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31754 State: PUBLISHED Published: 2025-04-01T14:51:12.129Z Last Updated: 2025-04-01T20:36:20.320Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: DobsonDev Products: DobsonDev Shortcodes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DobsonDev DobsonDev Shortcodes allows Stored XSS. This issue affects DobsonDev Shortcodes: from n/a through 2.1.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dobsondev-shortcodes/vulnerability/wordpress-dobsondev-shortcodes-plugin-2-1-12-stored-cross-si
atabase/wordpress/plugin/dobsondev-shortcodes/vulnerability/wordpress-dobsondev-shortcodes-plugin-2-1-12-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31755 State: PUBLISHED Published: 2025-04-01T14:51:12.650Z Last Updated: 2025-04-01T20:36:11.981Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: josselynj Products: pCloud Backup Problem Types: CWE-862 Description: Missing Authorization vulnerability in josselynj pCloud Backup allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects pCloud Backup: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pcloud-backup/vulnerability/wordpress-pcloud-backup-plugin-1-0-1-broken-access-control-vulnerability?_s_id=cve