Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-52728 State: PUBLISHED Published: 2025-08-14T10:34:02.317Z Last Updated: 2025-08-14T18:53:44.352Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: WebCodingPlace Products: Responsive Posts Carousel WordPress Plugin Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebCodingPlace Responsive Posts Carousel WordPress Plugin allows PHP Local File Inclusion. This issue affects Responsive Posts Carousel WordPress Plugin: from n/a through 15.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpre
a through 15.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/responsive-posts-carousel-pro/vulnerability/wordpress-responsive-posts-carousel-wordpress-plugin-plugin-15-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52729 State: PUBLISHED Published: 2025-06-27T11:52:24.415Z Last Updated: 2025-06-27T13:10:07.458Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: thembay Products: Diza Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza allows PHP Local File Inclusion. This issue affects Diza: from n/a through 1.3.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/diza/vulnerability/wordpress-diza-1-3-9-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52730 State: PUBLISHED Published: 2025-08-14T10:34:01.776Z Last Updated: 2025-08-14T14:47:21.874Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: themefunction Products: WordPress Event Manager, Event Calendar and Booking Plugin Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin allows Stored XSS. This issue affects WordPress Event Manager, Event Calendar and Booking Plugin: from n/a through 4.0.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com
Plugin: from n/a through 4.0.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/eventin-pro/vulnerability/wordpress-wordpress-event-manager-event-calendar-and-booking-plugin-plugin-4-0-24-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52731 State: PUBLISHED Published: 2025-08-14T10:34:01.225Z Last Updated: 2025-08-14T14:47:29.016Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: themefunction Products: WordPress Event Manager, Event Calendar and Booking Plugin Problem Types: CWE-862 Description: Missing Authorization vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WordPress Event Manager, Event Calendar and Booking Plugin: from n/a through 4.0.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/
om n/a through 4.0.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/eventin-pro/vulnerability/wordpress-wordpress-event-manager-event-calendar-and-booking-plugin-plugin-4-0-24-arbitrary-content-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52732 State: PUBLISHED Published: 2025-08-14T10:34:00.681Z Last Updated: 2025-08-14T14:47:35.487Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: RealMag777 Products: Google Map Targeting Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RealMag777 Google Map Targeting allows PHP Local File Inclusion. This issue affects Google Map Targeting: from n/a through 1.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gmap-targeting/vulnerability/wordpress-google-map-targeting-plu
nces: - https://patchstack.com/database/wordpress/plugin/gmap-targeting/vulnerability/wordpress-google-map-targeting-plugin-1-1-6-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52733 State: PUBLISHED Published: 2025-06-20T15:03:37.794Z Last Updated: 2025-06-23T16:22:50.111Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Anonform Ab Products: ANON::form embedded secure form Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anonform Ab ANON::form embedded secure form allows DOM-Based XSS. This issue affects ANON::form embedded secure form: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/anonform-embedded-secure-form/vulnerability/wordpress-anon
eferences: - https://patchstack.com/database/wordpress/plugin/anonform-embedded-secure-form/vulnerability/wordpress-anon-form-embedded-secure-form-plugin-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52734 State: PUBLISHED Published: 2025-10-22T14:32:22.152Z Last Updated: 2025-11-13T10:33:41.735Z Vendors: ERA404 Products: CropRefine Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ERA404 CropRefine croprefine allows Reflected XSS.This issue affects CropRefine: from n/a through <= 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/croprefine/vulnerability/wordpress-croprefine-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52735 State: PUBLISHED Published: 2025-10-22T14:32:22.345Z Last Updated: 2025-11-13T10:33:41.750Z Vendors: XLPlugins Products: NextMove Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Reflected XSS.This issue affects NextMove Lite: from n/a through <= 2.21.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/woo-thank-you-page-nextmove-lite/vulnerability/wordpress-nextmove-lite-plugin-2-20-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52736 State: PUBLISHED Published: 2025-10-22T14:32:22.566Z Last Updated: 2025-11-13T10:33:41.739Z Vendors: Daman Jeet Products: Finale Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daman Jeet Finale Lite finale-woocommerce-sales-countdown-timer-discount allows Reflected XSS.This issue affects Finale Lite: from n/a through <= 2.20.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/finale-woocommerce-sales-countdown-timer-discount/vulnerability/wordpress-finale-lite-plugin-2-20-0-cross-site-scripting-xss-vulnerabi
erce-sales-countdown-timer-discount/vulnerability/wordpress-finale-lite-plugin-2-20-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52737 State: PUBLISHED Published: 2025-10-22T14:32:22.788Z Last Updated: 2025-11-13T10:33:41.778Z Vendors: Tijmen Smit Products: WP Store Locator Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Tijmen Smit WP Store Locator wp-store-locator allows Object Injection.This issue affects WP Store Locator: from n/a through <= 2.2.260. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-store-locator/vulnerability/wordpress-wp-store-locator-plugin-2-2-260-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52738 State: PUBLISHED Published: 2025-10-22T14:32:23.016Z Last Updated: 2025-11-13T10:33:41.760Z Vendors: Wikimedia Foundation Products: Wikipedia Preview Problem Types: CWE-862 Description: Missing Authorization vulnerability in Wikimedia Foundation Wikipedia Preview wikipedia-preview allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wikipedia Preview: from n/a through <= 1.15.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wikipedia-preview/vulnerability/wordpress-wikipedia-preview-plugin-1-15-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-52740 State: PUBLISHED Published: 2025-10-22T14:32:23.272Z Last Updated: 2025-11-13T10:33:41.761Z Vendors: Hernan Villanueva Products: Boldermail Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Hernan Villanueva Boldermail boldermail allows Object Injection.This issue affects Boldermail: from n/a through <= 2.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/boldermail/vulnerability/wordpress-boldermail-plugin-2-4-0-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52741 State: PUBLISHED Published: 2025-10-22T14:32:23.521Z Last Updated: 2025-11-13T10:33:41.802Z Vendors: Barry Kooij Products: Post Connector Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Barry Kooij Post Connector post-connector allows Reflected XSS.This issue affects Post Connector: from n/a through <= 1.0.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/post-connector/vulnerability/wordpress-post-connector-plugin-1-0-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52742 State: PUBLISHED Published: 2025-10-22T14:32:23.806Z Last Updated: 2025-11-13T10:33:41.814Z Vendors: Igor Benic Products: Pets Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Benic Pets pets allows Reflected XSS.This issue affects Pets: from n/a through <= 1.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/pets/vulnerability/wordpress-pets-plugin-1-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52743 State: PUBLISHED Published: 2025-10-22T14:32:24.069Z Last Updated: 2025-11-13T10:33:41.822Z Vendors: bobbingwide Products: oik-privacy-policy Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bobbingwide oik-privacy-policy oik-privacy-policy allows Reflected XSS.This issue affects oik-privacy-policy: from n/a through <= 1.4.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/oik-privacy-policy/vulnerability/wordpress-oik-privacy-policy-plugin-1-4-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52748 State: PUBLISHED Published: 2025-10-22T14:32:24.265Z Last Updated: 2025-11-13T10:33:41.801Z Vendors: e-plugins Products: Directory Pro Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Directory Pro directory-pro allows Reflected XSS.This issue affects Directory Pro: from n/a through <= 2.5.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/directory-pro/vulnerability/wordpress-directory-pro-plugin-2-5-5-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-52749 State: PUBLISHED Published: 2025-10-22T14:32:24.442Z Last Updated: 2025-11-13T10:33:41.791Z Vendors: Activity Track Products: Uji Countdown Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Activity Track Uji Countdown uji-countdown allows Reflected XSS.This issue affects Uji Countdown: from n/a through <= 2.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/uji-countdown/vulnerability/wordpress-uji-countdown-plugin-2-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52750 State: PUBLISHED Published: 2025-10-22T14:32:24.658Z Last Updated: 2025-11-13T10:33:41.825Z Vendors: Juergen Schulze Products: Emu2 Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juergen Schulze Emu2 emu2-email-users-2 allows Reflected XSS.This issue affects Emu2: from n/a through <= 0.83b. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/emu2-email-users-2/vulnerability/wordpress-emu2-plugin-0-83b-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52751 State: PUBLISHED Published: 2025-10-22T14:32:24.841Z Last Updated: 2025-11-13T10:33:41.918Z Vendors: colome Products: Slide Puzzle Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in colome Slide Puzzle slide-puzzle allows Reflected XSS.This issue affects Slide Puzzle: from n/a through <= 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/slide-puzzle/vulnerability/wordpress-slide-puzzle-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52752 State: PUBLISHED Published: 2025-10-22T14:32:25.039Z Last Updated: 2025-11-13T10:33:41.933Z Vendors: ThemeAtelier Products: IDonatePro Problem Types: CWE-497 Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeAtelier IDonatePro idonate-pro allows Retrieve Embedded Sensitive Data.This issue affects IDonatePro: from n/a through <= 2.1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/idonate-pro/vulnerability/wordpress-idonatepro-plugin-2-1-9-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-52753 State: PUBLISHED Published: 2025-10-22T14:32:25.219Z Last Updated: 2025-11-13T10:33:41.961Z Vendors: supsystic Products: Contact Form by Supsystic Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in supsystic Contact Form by Supsystic contact-form-by-supsystic allows Reflected XSS.This issue affects Contact Form by Supsystic: from n/a through <= 1.7.35. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/contact-form-by-supsystic/vulnerability/wordpress-contact-form-by-supsystic-plugin-1-7-35-cross-site-scripting-xss-vul
n/contact-form-by-supsystic/vulnerability/wordpress-contact-form-by-supsystic-plugin-1-7-35-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52754 State: PUBLISHED Published: 2025-10-22T14:32:25.569Z Last Updated: 2025-11-13T10:33:41.964Z Vendors: selloio Products: Sello ChannelConnector Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in selloio Sello ChannelConnector sello-channelconnector allows Reflected XSS.This issue affects Sello ChannelConnector: from n/a through <= 1.6.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/sello-channelconnector/vulnerability/wordpress-sello-channelconnector-plugin-1-6-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52755 State: PUBLISHED Published: 2025-10-22T14:32:26.093Z Last Updated: 2025-11-13T10:33:42.065Z Vendors: Chris Taylor Products: Child Themes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Taylor Child Themes child-themes allows Reflected XSS.This issue affects Child Themes: from n/a through <= 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/child-themes/vulnerability/wordpress-child-themes-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52756 State: PUBLISHED Published: 2025-10-22T14:32:26.710Z Last Updated: 2025-11-13T10:33:42.059Z Vendors: Sayan Datta Products: WP Last Modified Info Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Sayan Datta WP Last Modified Info wp-last-modified-info allows Remote Code Inclusion.This issue affects WP Last Modified Info: from n/a through <= 1.9.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-last-modified-info/vulnerability/wordpress-wp-last-modified-info-plugin-1-9-2-remote-code-execution-rce-vulnerability?_s_id=cve
CVE ID: CVE-2025-52757 State: PUBLISHED Published: 2025-10-22T14:32:27.245Z Last Updated: 2025-11-13T10:33:42.030Z Vendors: FantasticPlugins Products: SUMO Memberships for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in FantasticPlugins SUMO Memberships for WooCommerce sumomemberships allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SUMO Memberships for WooCommerce: from n/a through <= 7.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/sumomemberships/vulnerability/wordpress-sumo-memberships-for-woocommerce-plugin-7-6-0-arbitrary-content-d
rdpress/Plugin/sumomemberships/vulnerability/wordpress-sumo-memberships-for-woocommerce-plugin-7-6-0-arbitrary-content-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52758 State: PUBLISHED Published: 2025-10-22T14:32:27.961Z Last Updated: 2025-11-13T10:33:42.056Z Vendors: Gesundheit Bewegt GmbH Products: Zippy Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy zippy allows Using Malicious Files.This issue affects Zippy: from n/a through <= 1.7.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/zippy/vulnerability/wordpress-zippy-plugin-1-7-0-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-52760 State: PUBLISHED Published: 2025-10-22T14:32:28.248Z Last Updated: 2025-11-13T10:33:42.063Z Vendors: Globalis Products: MultiSite Clone Duplicator Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Globalis MultiSite Clone Duplicator multisite-clone-duplicator allows Reflected XSS.This issue affects MultiSite Clone Duplicator: from n/a through <= 1.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/multisite-clone-duplicator/vulnerability/wordpress-multisite-clone-duplicator-plugin-1-5-3-cross-site-scripting-xss-v
in/multisite-clone-duplicator/vulnerability/wordpress-multisite-clone-duplicator-plugin-1-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52761 State: PUBLISHED Published: 2025-08-28T12:37:17.522Z Last Updated: 2025-08-28T18:56:08.503Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: manfcarlo Products: WP Funnel Manager Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in manfcarlo WP Funnel Manager allows Object Injection. This issue affects WP Funnel Manager: from n/a through 1.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-funnel-manager/vulnerability/wordpress-wp-funnel-manager-plugin-1-4-0-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52763 State: PUBLISHED Published: 2025-10-22T14:32:28.478Z Last Updated: 2025-11-13T10:33:42.114Z Vendors: NickDuncan Products: Nifty Backups Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NickDuncan Nifty Backups nifty-backups allows Reflected XSS.This issue affects Nifty Backups: from n/a through <= 1.08. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/nifty-backups/vulnerability/wordpress-nifty-backups-plugin-1-08-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52764 State: PUBLISHED Published: 2025-11-06T15:53:56.937Z Last Updated: 2025-11-13T10:33:42.082Z Vendors: marielav Products: flexoslider Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in marielav flexoslider flexoslider allows Reflected XSS.This issue affects flexoslider: from n/a through <= 1.0004. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/flexoslider/vulnerability/wordpress-flexoslider-plugin-1-0004-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52765 State: PUBLISHED Published: 2025-08-14T18:22:06.364Z Last Updated: 2025-08-14T20:10:35.458Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: lisensee Products: NetInsight Analytics Implementation Plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in lisensee NetInsight Analytics Implementation Plugin allows Stored XSS. This issue affects NetInsight Analytics Implementation Plugin: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/netinsight-analytics-implementation-plugin/vulnerability/wordpress-netinsight-analyt
stack.com/database/wordpress/plugin/netinsight-analytics-implementation-plugin/vulnerability/wordpress-netinsight-analytics-implementation-plugin-plugin-plugin-1-0-3-cross-site-request-forgery-csrf-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-52767 State: PUBLISHED Published: 2025-08-14T18:22:05.767Z Last Updated: 2025-08-14T20:10:09.863Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: lisensee Products: NetInsight Analytics Implementation Plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in lisensee NetInsight Analytics Implementation Plugin allows Cross Site Request Forgery. This issue affects NetInsight Analytics Implementation Plugin: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/netinsight-analytics-implementation-plugin/vulnerability/wordpress
s: - https://patchstack.com/database/wordpress/plugin/netinsight-analytics-implementation-plugin/vulnerability/wordpress-netinsight-analytics-implementation-plugin-plugin-plugin-1-0-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52769 State: PUBLISHED Published: 2025-08-14T18:22:05.239Z Last Updated: 2025-08-14T20:09:29.588Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: flexostudio Products: flexo-social-gallery Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in flexostudio flexo-social-gallery allows Cross Site Request Forgery. This issue affects flexo-social-gallery: from n/a through 1.0006. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/flexo-social-gallery/vulnerability/wordpress-flexo-social-gallery-plugin-plugin-1-0006-cross-site-request-forgery-csrf-vulner
-social-gallery/vulnerability/wordpress-flexo-social-gallery-plugin-plugin-1-0006-cross-site-request-forgery-csrf-vulnerability?_s_id=cve