Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-31756 State: PUBLISHED Published: 2025-04-01T14:51:13.185Z Last Updated: 2025-04-01T20:36:03.788Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: tuyennv Products: TZ PlusGallery Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in tuyennv TZ PlusGallery allows Cross Site Request Forgery. This issue affects TZ PlusGallery: from n/a through 1.5.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/tz-plus-gallery/vulnerability/wordpress-tz-plusgallery-plugin-1-5-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31757 State: PUBLISHED Published: 2025-04-01T14:51:13.704Z Last Updated: 2025-04-01T20:35:55.094Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: BinaryCarpenter Products: Free Woocommerce Product Table View Problem Types: CWE-862 Description: Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Free Woocommerce Product Table View: from n/a through 1.78. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/free-product-table-for-woocommerce/vulnerability
ichment: References: - https://patchstack.com/database/wordpress/plugin/free-product-table-for-woocommerce/vulnerability/wordpress-free-woocommerce-product-table-view-plugin-1-78-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31758 State: PUBLISHED Published: 2025-04-03T13:27:13.294Z Last Updated: 2025-04-03T15:06:06.703Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: BinaryCarpenter Products: Free Woocommerce Product Table View Problem Types: CWE-862 Description: Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Free Woocommerce Product Table View: from n/a through 1.78. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/free-product-table-for-woocommerce/vulnerability
ichment: References: - https://patchstack.com/database/wordpress/plugin/free-product-table-for-woocommerce/vulnerability/wordpress-free-woocommerce-product-table-view-plugin-1-78-arbitrary-content-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-31759 State: PUBLISHED Published: 2025-04-01T14:51:14.211Z Last Updated: 2025-04-01T20:35:47.438Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: BooSpot Products: Boo Recipes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BooSpot Boo Recipes allows Stored XSS. This issue affects Boo Recipes: from n/a through 2.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/boo-recipes/vulnerability/wordpress-boo-recipes-plugin-2-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31760 State: PUBLISHED Published: 2025-04-01T14:51:14.727Z Last Updated: 2025-04-01T20:35:38.593Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: snapwidget Products: SnapWidget Social Photo Feed Widget Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in snapwidget SnapWidget Social Photo Feed Widget allows DOM-Based XSS. This issue affects SnapWidget Social Photo Feed Widget: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/snapwidget-wp-instagram-widget/vulnerability/w
nrichment: References: - https://patchstack.com/database/wordpress/plugin/snapwidget-wp-instagram-widget/vulnerability/wordpress-snapwidget-social-photo-feed-widget-plugin-1-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31761 State: PUBLISHED Published: 2025-04-01T14:51:15.256Z Last Updated: 2025-04-01T20:35:28.788Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: DEJAN Products: Hypotext Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DEJAN Hypotext allows Stored XSS. This issue affects Hypotext: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hypotext/vulnerability/wordpress-hypotext-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31762 State: PUBLISHED Published: 2025-04-01T14:51:15.765Z Last Updated: 2025-04-01T20:35:21.654Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: andreyazimov Products: Sheet2Site Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andreyazimov Sheet2Site allows Stored XSS. This issue affects Sheet2Site: from n/a through 1.0.18. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sheet2site/vulnerability/wordpress-sheet2site-plugin-1-0-18-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31763 State: PUBLISHED Published: 2025-04-01T14:51:16.279Z Last Updated: 2025-04-01T20:35:12.593Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Preliot Products: Cache control by Cacholong Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Preliot Cache control by Cacholong allows Cross Site Request Forgery. This issue affects Cache control by Cacholong: from n/a through 5.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cache-control-by-cacholong/vulnerability/wordpress-cache-control-by-cacholong-plugin-5-4-1-cross-site-request-forger
gin/cache-control-by-cacholong/vulnerability/wordpress-cache-control-by-cacholong-plugin-5-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31764 State: PUBLISHED Published: 2025-04-01T14:51:16.778Z Last Updated: 2025-04-01T20:35:03.185Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Preliot Products: Cache control by Cacholong Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Preliot Cache control by Cacholong allows Stored XSS. This issue affects Cache control by Cacholong: from n/a through 5.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cache-control-by-cacholong/vulnerability/wordpress-cache-control-by-cacholong-plug
chstack.com/database/wordpress/plugin/cache-control-by-cacholong/vulnerability/wordpress-cache-control-by-cacholong-plugin-5-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31765 State: PUBLISHED Published: 2025-04-01T14:51:17.281Z Last Updated: 2025-04-01T20:34:49.847Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: themeqx Products: GDPR Cookie Notice Problem Types: CWE-862 Description: Missing Authorization vulnerability in themeqx GDPR Cookie Notice allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GDPR Cookie Notice: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gdpr-cookie-notice/vulnerability/wordpress-gdpr-cookie-notice-plugin-1-2-0-broken-access-control-vulnerability?_s_
lugin/gdpr-cookie-notice/vulnerability/wordpress-gdpr-cookie-notice-plugin-1-2-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31766 State: PUBLISHED Published: 2025-04-01T14:51:17.794Z Last Updated: 2025-04-01T20:34:40.754Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: PhotoShelter Products: PhotoShelter for Photographers Blog Feed Plugin Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PhotoShelter PhotoShelter for Photographers Blog Feed Plugin allows Stored XSS. This issue affects PhotoShelter for Photographers Blog Feed Plugin: from n/a through 1.5.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/photoshel
itional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/photoshelter-official-plugin/vulnerability/wordpress-photoshelter-for-photographers-blog-feed-plugin-1-5-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31767 State: PUBLISHED Published: 2025-04-01T14:51:18.309Z Last Updated: 2025-04-01T17:46:28.082Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: OTWthemes Products: Post Custom Templates Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Post Custom Templates Lite allows Stored XSS. This issue affects Post Custom Templates Lite: from n/a through 1.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/post-custom-templates-lite/vulnerability/wordpress-post-custom-templates-lite-p
patchstack.com/database/wordpress/plugin/post-custom-templates-lite/vulnerability/wordpress-post-custom-templates-lite-plugin-1-14-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31768 State: PUBLISHED Published: 2025-04-03T13:27:13.512Z Last Updated: 2025-04-03T15:05:55.241Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: OTWthemes Products: Widget Manager Light Problem Types: CWE-862 Description: Missing Authorization vulnerability in OTWthemes Widget Manager Light allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Widget Manager Light: from n/a through 1.18. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/widget-manager-light/vulnerability/wordpress-widget-manager-light-plugin-1-18-broken-access-control-vulnerability
plugin/widget-manager-light/vulnerability/wordpress-widget-manager-light-plugin-1-18-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31769 State: PUBLISHED Published: 2025-04-01T14:51:18.860Z Last Updated: 2025-04-01T20:34:22.714Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: NiteoThemes Products: CLP – Custom Login Page by NiteoThemes Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in NiteoThemes CLP – Custom Login Page by NiteoThemes allows Cross Site Request Forgery. This issue affects CLP – Custom Login Page by NiteoThemes: from n/a through 1.5.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/clp-custom-login-page/vulnerability/wordpress-clp-custom-login-page-by-n
ttps://patchstack.com/database/wordpress/plugin/clp-custom-login-page/vulnerability/wordpress-clp-custom-login-page-by-niteothemes-plugin-1-5-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31770 State: PUBLISHED Published: 2025-04-01T14:51:19.428Z Last Updated: 2025-04-01T19:45:43.385Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: OTWthemes Products: Content Manager Light Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Content Manager Light allows Stored XSS. This issue affects Content Manager Light: from n/a through 3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/content-manager-light/vulnerability/wordpress-content-manager-light-plugin-3-2-cross-site-scrip
atabase/wordpress/plugin/content-manager-light/vulnerability/wordpress-content-manager-light-plugin-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31771 State: PUBLISHED Published: 2025-04-01T14:51:19.963Z Last Updated: 2025-04-01T19:45:23.601Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Sultan Nasir Uddin Products: Team Members for Elementor Page Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sultan Nasir Uddin Team Members for Elementor Page Builder allows Stored XSS. This issue affects Team Members for Elementor Page Builder: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/team-members-for-elem
yst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/team-members-for-elementor/vulnerability/wordpress-team-members-for-elementor-page-builder-plugin-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31772 State: PUBLISHED Published: 2025-04-01T14:51:20.508Z Last Updated: 2025-04-01T19:45:04.993Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Astoundify Products: WP Modal Popup with Cookie Integration Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Astoundify WP Modal Popup with Cookie Integration allows Stored XSS. This issue affects WP Modal Popup with Cookie Integration: from n/a through 2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-modal-popup-with-cookie-integration/vul
Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-modal-popup-with-cookie-integration/vulnerability/wordpress-wp-modal-popup-with-cookie-integration-plugin-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31773 State: PUBLISHED Published: 2025-04-01T14:51:21.029Z Last Updated: 2025-04-01T19:31:06.203Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: cedcommerce Products: Ship Per Product Problem Types: CWE-862 Description: Missing Authorization vulnerability in cedcommerce Ship Per Product allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Ship Per Product: from n/a through 2.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ship-per-product/vulnerability/wordpress-ship-per-product-plugin-2-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31774 State: PUBLISHED Published: 2025-04-01T14:51:21.580Z Last Updated: 2025-04-01T19:30:45.095Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: WebProtect.ai Products: Astra Security Suite Problem Types: CWE-862 Description: Missing Authorization vulnerability in WebProtect.ai Astra Security Suite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Astra Security Suite: from n/a through 0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/getastra/vulnerability/wordpress-astra-security-suite-plugin-0-2-broken-access-control-vulnerabili
base/wordpress/plugin/getastra/vulnerability/wordpress-astra-security-suite-plugin-0-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31775 State: PUBLISHED Published: 2025-04-01T14:51:22.084Z Last Updated: 2025-04-01T20:34:12.031Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: smackcoders Products: Google SEO Pressor Snippet Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in smackcoders Google SEO Pressor Snippet allows Cross Site Request Forgery. This issue affects Google SEO Pressor Snippet: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/google-seo-author-snippets/vulnerability/wordpress-google-seo-pressor-for-rich-snippets-plugin-2-0-cross-site-
ss/plugin/google-seo-author-snippets/vulnerability/wordpress-google-seo-pressor-for-rich-snippets-plugin-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31776 State: PUBLISHED Published: 2025-04-01T14:51:22.600Z Last Updated: 2025-04-02T15:27:56.673Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Aphotrax Products: Uptime Robot Plugin for WordPress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Aphotrax Uptime Robot Plugin for WordPress allows Cross Site Request Forgery. This issue affects Uptime Robot Plugin for WordPress: from n/a through 2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/uptime-robot-monitor/vulnerability/wordpress-uptime-robot-plugin-2-3-cross-site-request-forgery
atabase/wordpress/plugin/uptime-robot-monitor/vulnerability/wordpress-uptime-robot-plugin-2-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31777 State: PUBLISHED Published: 2025-04-01T14:51:23.123Z Last Updated: 2025-04-02T15:22:49.022Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: BeastThemes Products: Clockinator Lite Problem Types: CWE-862 Description: Missing Authorization vulnerability in BeastThemes Clockinator Lite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Clockinator Lite: from n/a through 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/clockify-lite/vulnerability/wordpress-clockinator-lite-plugin-1-0-7-broken-access-control-vulnerability?_s_id=cv
/plugin/clockify-lite/vulnerability/wordpress-clockinator-lite-plugin-1-0-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31778 State: PUBLISHED Published: 2025-04-01T14:51:23.646Z Last Updated: 2025-04-02T15:21:15.654Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: raphaelheide Products: Donate Me Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in raphaelheide Donate Me allows Reflected XSS. This issue affects Donate Me: from n/a through 1.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/donate-me/vulnerability/wordpress-donate-me-plugin-1-2-5-stored-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2025-31779 State: PUBLISHED Published: 2025-04-01T14:51:24.164Z Last Updated: 2025-04-02T15:20:03.247Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Jonathan Daggerhart Products: Query Wrangler Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Jonathan Daggerhart Query Wrangler allows Cross Site Request Forgery. This issue affects Query Wrangler: from n/a through 1.5.53. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/query-wrangler/vulnerability/wordpress-query-wrangler-plugin-1-5-53-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31780 State: PUBLISHED Published: 2025-04-01T14:51:24.680Z Last Updated: 2025-04-02T15:19:06.840Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Andy Stratton Products: Append Content Problem Types: CWE-862 Description: Missing Authorization vulnerability in Andy Stratton Append Content allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Append Content: from n/a through 2.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/append-content/vulnerability/wordpress-append-content-plugin-2-1-1-csrf-to-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-31781 State: PUBLISHED Published: 2025-04-01T14:51:25.219Z Last Updated: 2025-04-01T19:30:23.926Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: ahmadshyk Products: Gift Cards for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in ahmadshyk Gift Cards for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Gift Cards for WooCommerce: from n/a through 1.5.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woo-giftcards/vulnerability/wordpress-gift-cards-for-woocommerce-plugin-1-5-8-broken-a
ack.com/database/wordpress/plugin/woo-giftcards/vulnerability/wordpress-gift-cards-for-woocommerce-plugin-1-5-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31782 State: PUBLISHED Published: 2025-04-01T14:51:25.735Z Last Updated: 2025-04-01T19:29:59.800Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: pupunzi Products: mb.YTPlayer Problem Types: CWE-862 Description: Missing Authorization vulnerability in pupunzi mb.YTPlayer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects mb.YTPlayer: from n/a through 3.3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpmbytplayer/vulnerability/wordpress-mb-ytplayer-plugin-3-3-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31783 State: PUBLISHED Published: 2025-04-01T14:51:26.241Z Last Updated: 2025-04-01T19:27:17.773Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Leartes.NET Products: Leartes TRY Exchange Rates Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leartes.NET Leartes TRY Exchange Rates allows Stored XSS. This issue affects Leartes TRY Exchange Rates: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/leartes-try-exchange-rates/vulnerability/wordpress-leartes-try-exchange-rate
://patchstack.com/database/wordpress/plugin/leartes-try-exchange-rates/vulnerability/wordpress-leartes-try-exchange-rates-plugin-2-1-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31784 State: PUBLISHED Published: 2025-04-01T14:51:26.746Z Last Updated: 2025-04-01T19:27:00.308Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Rudy Susanto Products: Embed Extended – Embed Maps, Videos, Websites, Source Codes, and more Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Rudy Susanto Embed Extended – Embed Maps, Videos, Websites, Source Codes, and more allows Cross Site Request Forgery. This issue affects Embed Extended – Embed Maps, Videos, Websites, Source Codes, and more: from n/a through 1.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/dat
ore: from n/a through 1.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/embed-extended/vulnerability/wordpress-embed-extended-embed-maps-videos-websites-source-codes-and-more-plugin-1-4-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve