Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-50016 State: PUBLISHED Published: 2025-06-20T15:04:00.804Z Last Updated: 2025-06-23T16:19:55.391Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: brijeshk89 Products: IP Based Login Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brijeshk89 IP Based Login allows Stored XSS. This issue affects IP Based Login: from n/a through 2.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ip-based-login/vulnerability/wordpress-ip-based-login-plugin-2-4-2-cross-site-scripting-xss-vulnerability?_s_id=
/plugin/ip-based-login/vulnerability/wordpress-ip-based-login-plugin-2-4-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50017 State: PUBLISHED Published: 2025-06-20T15:03:59.993Z Last Updated: 2025-06-23T17:20:45.397Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Matt Products: WP Voting Contest Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt WP Voting Contest allows Stored XSS. This issue affects WP Voting Contest: from n/a through 5.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-voting-contest/vulnerability/wordpress-wp-voting-contest-plugin-5-8-cross-site-scripting-xss-vulnerability?_s_id=c
in/wp-voting-contest/vulnerability/wordpress-wp-voting-contest-plugin-5-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50018 State: PUBLISHED Published: 2025-06-20T15:03:59.522Z Last Updated: 2025-06-23T19:34:17.155Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Tealium Products: Tealium Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tealium Tealium allows Stored XSS. This issue affects Tealium: from n/a through 2.1.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/tealium/vulnerability/wordpress-tealium-plugin-2-1-17-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50019 State: PUBLISHED Published: 2025-06-20T15:03:59.026Z Last Updated: 2025-06-23T19:34:37.538Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Sandor Kovacs Products: Simple Sticky Footer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sandor Kovacs Simple Sticky Footer allows Stored XSS. This issue affects Simple Sticky Footer : from n/a through 1.3.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-sticky-footer/vulnerability/wordpress-simple-sticky-footer-plugin-1-3-5-cross-si
ck.com/database/wordpress/plugin/simple-sticky-footer/vulnerability/wordpress-simple-sticky-footer-plugin-1-3-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50020 State: PUBLISHED Published: 2025-06-20T15:03:58.555Z Last Updated: 2025-06-23T19:34:55.872Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Nitin Yawalkar Products: RDFa Breadcrumb Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nitin Yawalkar RDFa Breadcrumb allows Stored XSS. This issue affects RDFa Breadcrumb: from n/a through 2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rdfa-breadcrumb/vulnerability/wordpress-rdfa-breadcrumb-plugin-2-3-cross-site-scripting-xss-vulnerabili
wordpress/plugin/rdfa-breadcrumb/vulnerability/wordpress-rdfa-breadcrumb-plugin-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50021 State: PUBLISHED Published: 2025-06-20T15:03:58.071Z Last Updated: 2025-06-23T19:35:16.477Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Robert Peake Products: Better Random Redirect Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robert Peake Better Random Redirect allows Stored XSS. This issue affects Better Random Redirect: from n/a through 1.3.20. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/better-random-redirect/vulnerability/wordpress-better-random-redirect-plugin-1-3-20
hstack.com/database/wordpress/plugin/better-random-redirect/vulnerability/wordpress-better-random-redirect-plugin-1-3-20-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50022 State: PUBLISHED Published: 2025-06-20T15:03:57.594Z Last Updated: 2025-06-23T19:35:36.110Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: justin_k Products: WP-FB-AutoConnect Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in justin_k WP-FB-AutoConnect allows Stored XSS. This issue affects WP-FB-AutoConnect: from n/a through 4.6.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-fb-autoconnect/vulnerability/wordpress-wp-fb-autoconnect-plugin-4-6-3-cross-site-scripting-xss-vulnerabi
press/plugin/wp-fb-autoconnect/vulnerability/wordpress-wp-fb-autoconnect-plugin-4-6-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50023 State: PUBLISHED Published: 2025-06-20T15:03:57.125Z Last Updated: 2025-06-23T19:35:53.660Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Chris Coyier Products: CodePen Embed Block Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Coyier CodePen Embed Block allows Stored XSS. This issue affects CodePen Embed Block: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/codepen-embed-block/vulnerability/wordpress-codepen-embed-block-plugin-1-1-1-cross-site-scrip
/database/wordpress/plugin/codepen-embed-block/vulnerability/wordpress-codepen-embed-block-plugin-1-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50024 State: PUBLISHED Published: 2025-06-20T15:03:56.651Z Last Updated: 2025-06-24T13:34:51.331Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Truong Thanh Products: ATP Call Now Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Truong Thanh ATP Call Now allows Stored XSS. This issue affects ATP Call Now: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/atp-call-now/vulnerability/wordpress-atp-call-now-plugin-1-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50025 State: PUBLISHED Published: 2025-06-20T15:03:56.190Z Last Updated: 2025-06-24T13:35:29.611Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: codepeople Products: CP Polls Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP Polls allows Stored XSS. This issue affects CP Polls: from n/a through 1.0.81. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cp-polls/vulnerability/wordpress-cp-polls-plugin-1-0-81-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50026 State: PUBLISHED Published: 2025-06-20T15:03:55.684Z Last Updated: 2025-06-24T13:35:51.210Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: spoki Products: Spoki Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spoki Spoki allows Stored XSS. This issue affects Spoki: from n/a through 2.16.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/spoki/vulnerability/wordpress-spoki-plugin-2-16-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50027 State: PUBLISHED Published: 2025-06-20T15:03:55.228Z Last Updated: 2025-06-23T16:20:01.463Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: xootix Products: Login/Signup Popup Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xootix Login/Signup Popup allows Stored XSS. This issue affects Login/Signup Popup: from n/a through 2.9.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-login-woocommerce/vulnerability/wordpress-login-signup-popup-plugin-2-9-4-cross-site-scripting-xss-vuln
ress/plugin/easy-login-woocommerce/vulnerability/wordpress-login-signup-popup-plugin-2-9-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50028 State: PUBLISHED Published: 2025-07-16T11:27:57.237Z Last Updated: 2025-07-16T20:22:36.936Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: CodeSolz Products: Ultimate Push Notifications Problem Types: CWE-862 Description: Missing Authorization vulnerability in CodeSolz Ultimate Push Notifications allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ultimate Push Notifications: from n/a through 1.1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ultimate-push-notifications/vulnerability/wordpress-ultimate-push-notifications-1-1-9
tack.com/database/wordpress/plugin/ultimate-push-notifications/vulnerability/wordpress-ultimate-push-notifications-1-1-9-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-50029 State: PUBLISHED Published: 2025-08-14T10:34:06.255Z Last Updated: 2025-08-14T15:56:43.498Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Ashish Products: AI Tools Problem Types: CWE-862 Description: Missing Authorization vulnerability in Ashish AI Tools allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AI Tools: from n/a through 4.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/artificial-intelligence-auto-content-generator/vulnerability/wordpress-ai-tools-4-0-7-arbitrary-content-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-50030 State: PUBLISHED Published: 2025-06-20T15:03:54.771Z Last Updated: 2025-06-23T16:20:09.731Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Sparkle Themes Products: Spark Multipurpose Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sparkle Themes Spark Multipurpose allows DOM-Based XSS. This issue affects Spark Multipurpose: from n/a through 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/spark-multipurpose/vulnerability/wordpress-spark-multipurpose-theme-1-0-7-cross-site-scrip
.com/database/wordpress/theme/spark-multipurpose/vulnerability/wordpress-spark-multipurpose-theme-1-0-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50031 State: PUBLISHED Published: 2025-08-14T10:34:05.698Z Last Updated: 2025-08-14T15:56:10.100Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: syedamirhussain91 Products: DB Backup Problem Types: CWE-862 Description: Missing Authorization vulnerability in syedamirhussain91 DB Backup allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects DB Backup: from n/a through 6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/db-backup/vulnerability/wordpress-db-backup-6-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-50032 State: PUBLISHED Published: 2025-07-04T11:17:57.979Z Last Updated: 2025-07-07T16:24:53.654Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Paytiko - Payment Orchestration Platform Products: Paytiko for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Paytiko - Payment Orchestration Platform Paytiko for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Paytiko for WooCommerce: from n/a through 1.3.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/paytiko/vulnerability/wordpress-
- CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/paytiko/vulnerability/wordpress-paytiko-for-woocommerce-1-3-13-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-50033 State: PUBLISHED Published: 2025-06-20T15:03:54.301Z Last Updated: 2025-06-23T16:20:15.785Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Sparkle Themes Products: Fitness Park Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sparkle Themes Fitness Park allows DOM-Based XSS. This issue affects Fitness Park: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/fitness-park/vulnerability/wordpress-fitness-park-theme-1-1-1-cross-site-scripting-xss-vulnerability?_s_id=c
press/theme/fitness-park/vulnerability/wordpress-fitness-park-theme-1-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50034 State: PUBLISHED Published: 2025-06-20T15:03:53.830Z Last Updated: 2025-06-23T16:20:21.188Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Mahmudul Hasan Arif Products: Enhanced Blocks &#8211; Page Builder Blocks for Gutenberg Problem Types: CWE-862 Description: Missing Authorization vulnerability in Mahmudul Hasan Arif Enhanced Blocks &#8211; Page Builder Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Enhanced Blocks &#8211; Page Builder Blocks for Gutenberg: from n/a through 1.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com
tenberg: from n/a through 1.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/enhanced-blocks/vulnerability/wordpress-enhanced-blocks-page-builder-blocks-for-gutenberg-plugin-1-4-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-50035 State: PUBLISHED Published: 2025-06-20T15:03:53.351Z Last Updated: 2025-06-23T16:20:27.137Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: CyrilG Products: Fyrebox Quizzes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyrilG Fyrebox Quizzes allows Stored XSS. This issue affects Fyrebox Quizzes: from n/a through 3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fyrebox-shortcode/vulnerability/wordpress-fyrebox-quizzes-plugin-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50036 State: PUBLISHED Published: 2025-06-20T15:03:52.888Z Last Updated: 2025-06-23T16:20:32.647Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Yamna Khawaja Products: Mailing Group Listserv Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Yamna Khawaja Mailing Group Listserv allows Cross Site Request Forgery. This issue affects Mailing Group Listserv: from n/a through 3.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-mailing-group/vulnerability/wordpress-mailing-group-listserv-plugin-3-0-5-cross-site-request-forgery-csrf-vulnera
gin/wp-mailing-group/vulnerability/wordpress-mailing-group-listserv-plugin-3-0-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-50037 State: PUBLISHED Published: 2025-06-20T15:03:52.404Z Last Updated: 2025-06-23T16:20:38.490Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Buying Buddy Products: Buying Buddy IDX CRM Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Buying Buddy Buying Buddy IDX CRM allows DOM-Based XSS. This issue affects Buying Buddy IDX CRM: from n/a through 2.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/buying-buddy-idx-crm/vulnerability/wordpress-buying-buddy-idx-crm-plugin-2-3-0-cross-si
ck.com/database/wordpress/plugin/buying-buddy-idx-crm/vulnerability/wordpress-buying-buddy-idx-crm-plugin-2-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50038 State: PUBLISHED Published: 2025-06-20T15:03:51.952Z Last Updated: 2025-06-23T16:20:44.192Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: anantaddons Products: Anant Addons for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in anantaddons Anant Addons for Elementor allows Stored XSS. This issue affects Anant Addons for Elementor: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/anant-addons-for-elementor/vulnerability/wordpress-anant-addons-for-elemen
ps://patchstack.com/database/wordpress/plugin/anant-addons-for-elementor/vulnerability/wordpress-anant-addons-for-elementor-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50039 State: PUBLISHED Published: 2025-07-04T11:17:57.478Z Last Updated: 2025-07-07T16:25:18.193Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: vgwort Products: VG WORT METIS Problem Types: CWE-862 Description: Missing Authorization vulnerability in vgwort VG WORT METIS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects VG WORT METIS: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/vgw-metis/vulnerability/wordpress-vg-wort-metis-2-0-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-50040 State: PUBLISHED Published: 2025-08-14T10:34:05.173Z Last Updated: 2025-08-14T15:55:25.705Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: moshensky Products: CF7 Spreadsheets Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in moshensky CF7 Spreadsheets allows Stored XSS. This issue affects CF7 Spreadsheets: from n/a through 2.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cf7-spreadsheets/vulnerability/wordpress-cf7-spreadsheets-plugin-2-3-2-cross-site-scripting-xss-vulnerabilit
ress/plugin/cf7-spreadsheets/vulnerability/wordpress-cf7-spreadsheets-plugin-2-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50041 State: PUBLISHED Published: 2025-06-20T15:03:51.484Z Last Updated: 2025-06-23T16:20:49.874Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WP Engine Products: Gutenberg Blocks – ACF Blocks Suite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Engine Gutenberg Blocks – ACF Blocks Suite allows Stored XSS. This issue affects Gutenberg Blocks – ACF Blocks Suite: from n/a through 2.6.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/acf-blocks/vulnerability/wordpress-gutenberg-block
hment: References: - https://patchstack.com/database/wordpress/plugin/acf-blocks/vulnerability/wordpress-gutenberg-blocks-acf-blocks-suite-plugin-2-6-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50042 State: PUBLISHED Published: 2025-06-20T15:03:51.023Z Last Updated: 2025-06-23T16:20:55.612Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: aviplugins.com Products: WP Register Profile With Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aviplugins.com WP Register Profile With Shortcode allows Stored XSS. This issue affects WP Register Profile With Shortcode: from n/a through 3.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-register-profile-with-shortcode/vulnerabi
ulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-register-profile-with-shortcode/vulnerability/wordpress-wp-register-profile-with-shortcode-plugin-3-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50043 State: PUBLISHED Published: 2025-06-20T15:03:50.507Z Last Updated: 2025-06-24T13:37:15.264Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Jordy Meow Products: Code Engine Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jordy Meow Code Engine allows Stored XSS. This issue affects Code Engine: from n/a through 0.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/code-engine/vulnerability/wordpress-code-engine-plugin-0-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-50044 State: PUBLISHED Published: 2025-06-20T15:03:50.047Z Last Updated: 2025-06-24T13:37:34.272Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Rameez Iqbal Products: Real Estate Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Rameez Iqbal Real Estate Manager allows Cross Site Request Forgery. This issue affects Real Estate Manager: from n/a through 7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/real-estate-manager/vulnerability/wordpress-real-estate-manager-plugin-7-3-cross-site-request-forgery-csrf-vulnerability-2?_s_id=
te-manager/vulnerability/wordpress-real-estate-manager-plugin-7-3-cross-site-request-forgery-csrf-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-50045 State: PUBLISHED Published: 2025-06-20T15:03:49.581Z Last Updated: 2025-06-24T13:37:51.093Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: ProWCPlugins Products: Related Products Manager for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProWCPlugins Related Products Manager for WooCommerce allows DOM-Based XSS. This issue affects Related Products Manager for WooCommerce: from n/a through 1.6.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/related-products-manager-wo
tes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/related-products-manager-woocommerce/vulnerability/wordpress-related-products-manager-for-woocommerce-plugin-1-6-2-cross-site-scripting-xss-vulnerability?_s_id=cve