Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-53205 State: PUBLISHED Published: 2025-08-20T08:03:19.865Z Last Updated: 2025-08-20T15:12:48.900Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: LambertGroup Products: Radio Player Shoutcast & Icecast Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Radio Player Shoutcast & Icecast allows Reflected XSS. This issue affects Radio Player Shoutcast & Icecast: from n/a through 4.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/lbg-audio4-html5-shoutcast/vulnerability/wordpress-ra
nt: References: - https://patchstack.com/database/wordpress/plugin/lbg-audio4-html5-shoutcast/vulnerability/wordpress-radio-player-shoutcast-icecast-4-4-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53206 State: PUBLISHED Published: 2025-06-27T13:21:01.852Z Last Updated: 2025-06-27T14:46:41.811Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: HT Plugins Products: HT Mega – Absolute Addons for WPBakery Page Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Mega – Absolute Addons for WPBakery Page Builder allows Stored XSS. This issue affects HT Mega – Absolute Addons for WPBakery Page Builder: from n/a through 1.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/h
0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ht-mega-for-wpbakery/vulnerability/wordpress-ht-mega-absolute-addons-for-wpbakery-page-builder-plugin-1-0-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53207 State: PUBLISHED Published: 2025-08-20T08:03:19.328Z Last Updated: 2025-08-20T15:12:55.940Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: WP Travel Products: WP Travel Gutenberg Blocks Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel WP Travel Gutenberg Blocks allows PHP Local File Inclusion. This issue affects WP Travel Gutenberg Blocks: from n/a through 3.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-travel-blocks/vulnerability/wordpress-wp-tra
richment: References: - https://patchstack.com/database/wordpress/plugin/wp-travel-blocks/vulnerability/wordpress-wp-travel-gutenberg-blocks-3-9-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53208 State: PUBLISHED Published: 2025-08-20T08:03:18.776Z Last Updated: 2025-08-20T15:13:02.908Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: paymayapg Products: Maya Business Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in paymayapg Maya Business allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Maya Business: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/paymaya-checkout-for-woocommerce/vulnerability/wordpress-maya-business-1-2-0-insecure-direct-object-referenc
ress/plugin/paymaya-checkout-for-woocommerce/vulnerability/wordpress-maya-business-1-2-0-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE ID: CVE-2025-53210 State: PUBLISHED Published: 2025-08-20T08:03:18.255Z Last Updated: 2025-08-20T15:13:10.077Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: bdthemes Products: ZoloBlocks Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in bdthemes ZoloBlocks allows PHP Local File Inclusion. This issue affects ZoloBlocks: from n/a through 2.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/zoloblocks/vulnerability/wordpress-zoloblocks-plugin-2-3-2-local-file-inclusion-vulnerability?_s_
abase/wordpress/plugin/zoloblocks/vulnerability/wordpress-zoloblocks-plugin-2-3-2-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53211 State: PUBLISHED Published: 2025-06-27T13:21:02.599Z Last Updated: 2025-06-27T14:46:33.683Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Roland Beaussant Products: Audio Editor &amp; Recorder Problem Types: CWE-497 Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roland Beaussant Audio Editor &amp; Recorder allows Retrieve Embedded Sensitive Data. This issue affects Audio Editor &amp; Recorder: from n/a through 2.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/audio-editor-recorder/vulnerability/wordpress-au
ichment: References: - https://patchstack.com/database/wordpress/plugin/audio-editor-recorder/vulnerability/wordpress-audio-editor-recorder-plugin-2-2-3-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-53212 State: PUBLISHED Published: 2025-08-20T08:03:17.725Z Last Updated: 2025-08-20T15:13:16.848Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: LambertGroup Products: Revolution Video Player With Bottom Playlist Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Revolution Video Player With Bottom Playlist allows Reflected XSS. This issue affects Revolution Video Player With Bottom Playlist: from n/a through 2.9.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/revolution-video-
Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/revolution-video-player/vulnerability/wordpress-revolution-video-player-with-bottom-playlist-2-9-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53213 State: PUBLISHED Published: 2025-08-20T08:03:17.156Z Last Updated: 2025-08-20T15:13:22.689Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: ELEXtensions Products: ReachShip WooCommerce Multi-Carrier & Conditional Shipping Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ReachShip WooCommerce Multi-Carrier & Conditional Shipping allows Using Malicious Files. This issue affects ReachShip WooCommerce Multi-Carrier & Conditional Shipping: from n/a through 4.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin
4.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/elex-reachship-multi-carrier-conditional-shipping/vulnerability/wordpress-reachship-woocommerce-multi-carrier-conditional-shipping-4-3-1-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-53214 State: PUBLISHED Published: 2025-11-06T15:53:58.037Z Last Updated: 2025-11-13T10:33:42.084Z Vendors: sertifier Products: Sertifier Certificate & Badge Maker Problem Types: CWE-862 Description: Missing Authorization vulnerability in sertifier Sertifier Certificate & Badge Maker sertifier-certificates-open-badges allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sertifier Certificate & Badge Maker: from n/a through <= 1.21. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/sertifier-certificates-open-badges/vulnerability/wordpress-sertifier-certificate-badge-maker
m/database/Wordpress/Plugin/sertifier-certificates-open-badges/vulnerability/wordpress-sertifier-certificate-badge-maker-plugin-1-19-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53215 State: PUBLISHED Published: 2025-08-28T12:37:18.162Z Last Updated: 2025-08-28T18:43:26.715Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: 8bitkid Products: Yahoo! WebPlayer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8bitkid Yahoo! WebPlayer allows Reflected XSS. This issue affects Yahoo! WebPlayer: from n/a through 2.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/yahoo-media-player/vulnerability/wordpress-yahoo-webplayer-plugin-2-0-6-cross-site-scripting-xss-vulnerability?
s/plugin/yahoo-media-player/vulnerability/wordpress-yahoo-webplayer-plugin-2-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53216 State: PUBLISHED Published: 2025-08-28T12:37:18.763Z Last Updated: 2025-08-28T18:41:32.555Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ThemeUniver Products: Glamer Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeUniver Glamer allows PHP Local File Inclusion. This issue affects Glamer: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/glamer/vulnerability/wordpress-glamer-theme-1-0-2-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53218 State: PUBLISHED Published: 2025-10-22T14:32:28.882Z Last Updated: 2025-11-13T10:33:42.135Z Vendors: Saad Iqbal Products: AppExperts Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal AppExperts appexperts allows Retrieve Embedded Sensitive Data.This issue affects AppExperts: from n/a through <= 1.4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/appexperts/vulnerability/wordpress-appexperts-plugin-1-4-5-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-53219 State: PUBLISHED Published: 2025-08-14T18:22:02.343Z Last Updated: 2025-08-14T20:07:29.241Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: pl4g4 Products: WP-Database-Optimizer-Tools Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in pl4g4 WP-Database-Optimizer-Tools allows Cross Site Request Forgery. This issue affects WP-Database-Optimizer-Tools: from n/a through 0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-database-optimizer-tools/vulnerability/wordpress-wp-database-optimizer-tools-plugin-plugin-0-2-cross-site-request-fo
/wp-database-optimizer-tools/vulnerability/wordpress-wp-database-optimizer-tools-plugin-plugin-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53220 State: PUBLISHED Published: 2025-08-28T12:37:19.380Z Last Updated: 2025-08-28T15:13:12.262Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: XmasB Products: XmasB Quotes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in XmasB XmasB Quotes allows Reflected XSS. This issue affects XmasB Quotes: from n/a through 1.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/xmasb-quotes/vulnerability/wordpress-xmasb-quotes-plugin-1-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53221 State: PUBLISHED Published: 2025-08-14T18:22:01.641Z Last Updated: 2025-08-14T20:07:08.266Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: codeablepress Products: CodeablePress Problem Types: CWE-862 Description: Missing Authorization vulnerability in codeablepress CodeablePress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CodeablePress: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/codeablepress-simple-frontend-profile-picture-upload/vulnerability/wordpress-codeablepress-plugin-plugin-1-0-0-broken
in/codeablepress-simple-frontend-profile-picture-upload/vulnerability/wordpress-codeablepress-plugin-plugin-1-0-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53223 State: PUBLISHED Published: 2025-08-28T12:37:20.029Z Last Updated: 2025-08-28T14:20:21.760Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: undoIT Products: Theme Switcher Reloaded Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in undoIT Theme Switcher Reloaded allows Reflected XSS. This issue affects Theme Switcher Reloaded: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/theme-switcher-reloaded/vulnerability/wordpress-theme-switcher-reloaded-plugin-1-1-cross-site-
database/wordpress/plugin/theme-switcher-reloaded/vulnerability/wordpress-theme-switcher-reloaded-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53224 State: PUBLISHED Published: 2025-08-28T12:37:20.632Z Last Updated: 2025-08-28T14:20:06.551Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Koen Schuit Products: NextGEN Gallery Search Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Koen Schuit NextGEN Gallery Search allows Reflected XSS. This issue affects NextGEN Gallery Search: from n/a through 2.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/nextgen-gallery-search-galleries/vulnerability/wordpress-nextgen-gallery-search-plugin
ack.com/database/wordpress/plugin/nextgen-gallery-search-galleries/vulnerability/wordpress-nextgen-gallery-search-plugin-2-12-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53225 State: PUBLISHED Published: 2025-08-28T12:37:21.237Z Last Updated: 2025-08-28T14:19:56.404Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: eboekhouden Products: e-Boekhouden.nl Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eboekhouden e-Boekhouden.nl allows Reflected XSS. This issue affects e-Boekhouden.nl: from n/a through 1.9.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/e-boekhoudennl-connector/vulnerability/wordpress-e-boekhouden-nl-plugin-1-9-3-cross-site-scripting-xss-vul
dpress/plugin/e-boekhoudennl-connector/vulnerability/wordpress-e-boekhouden-nl-plugin-1-9-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53226 State: PUBLISHED Published: 2025-08-20T08:03:16.587Z Last Updated: 2025-08-20T15:13:28.372Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: digitalzoomstudio Products: Comments Capcha Box Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in digitalzoomstudio Comments Capcha Box allows Reflected XSS. This issue affects Comments Capcha Box: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/comments-capcha-box/vulnerability/wordpress-comments-capcha-box-plugin-1-1-cross-sit
stack.com/database/wordpress/plugin/comments-capcha-box/vulnerability/wordpress-comments-capcha-box-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53227 State: PUBLISHED Published: 2025-08-28T12:37:21.849Z Last Updated: 2025-08-28T14:19:49.442Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Unfoldwp Products: Magazine Saga Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unfoldwp Magazine Saga allows PHP Local File Inclusion. This issue affects Magazine Saga: from n/a through 1.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/magazine-saga/vulnerability/wordpress-magazine-saga-theme-1-2-7-local-file-inclusion-vuln
k.com/database/wordpress/theme/magazine-saga/vulnerability/wordpress-magazine-saga-theme-1-2-7-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53229 State: PUBLISHED Published: 2025-10-22T14:32:29.122Z Last Updated: 2025-11-13T10:33:42.119Z Vendors: kamleshyadav Products: RockON DJ Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kamleshyadav RockON DJ rockon allows Reflected XSS.This issue affects RockON DJ: from n/a through <= 3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/rockon/vulnerability/wordpress-rockon-dj-theme-3-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53230 State: PUBLISHED Published: 2025-08-28T12:37:22.433Z Last Updated: 2025-08-28T14:19:43.578Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: honzat Products: Page Manager for Elementor Problem Types: CWE-862 Description: Missing Authorization vulnerability in honzat Page Manager for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Page Manager for Elementor: from n/a through 2.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/page-manager-for-elementor/vulnerability/wordpress-page-manager-for-elementor-plugin-2-0-5-bro
database/wordpress/plugin/page-manager-for-elementor/vulnerability/wordpress-page-manager-for-elementor-plugin-2-0-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53232 State: PUBLISHED Published: 2025-10-22T14:32:29.356Z Last Updated: 2025-11-13T10:33:42.122Z Vendors: inkthemes Products: WP Gmail SMTP Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in inkthemes WP Gmail SMTP wp-gmail-smtp allows Retrieve Embedded Sensitive Data.This issue affects WP Gmail SMTP: from n/a through <= 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-gmail-smtp/vulnerability/wordpress-wp-gmail-smtp-plugin-1-0-7-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-53234 State: PUBLISHED Published: 2025-10-22T14:32:29.678Z Last Updated: 2025-11-13T10:33:42.085Z Vendors: AndonDesign Products: UDesign Core Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign Core u-design-core allows Reflected XSS.This issue affects UDesign Core: from n/a through <= 4.14.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/u-design-core/vulnerability/wordpress-udesign-core-plugin-4-14-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53236 State: PUBLISHED Published: 2025-10-22T14:32:29.996Z Last Updated: 2025-11-13T10:33:42.177Z Vendors: AndonDesign Products: UDesign Core Problem Types: CWE-862 Description: Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UDesign Core: from n/a through <= 4.14.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/u-design-core/vulnerability/wordpress-udesign-core-plugin-4-14-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53238 State: PUBLISHED Published: 2025-10-22T14:32:30.376Z Last Updated: 2025-11-13T10:33:42.194Z Vendors: Toast Plugins Products: Toast Mobile Menu Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Toast Plugins Toast Mobile Menu toast-responsive-menu allows Stored XSS.This issue affects Toast Mobile Menu: from n/a through <= 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/toast-responsive-menu/vulnerability/wordpress-toast-mobile-menu-plugin-1-0-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53239 State: PUBLISHED Published: 2025-11-06T15:53:58.555Z Last Updated: 2025-11-13T10:33:42.173Z Vendors: bnovotny Products: User Registration Aide Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bnovotny User Registration Aide user-registration-aide allows Reflected XSS.This issue affects User Registration Aide: from n/a through <= 1.5.3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/user-registration-aide/vulnerability/wordpress-user-registration-aide-plugin-1-5-3-8-cross-site-scripting-xss-vulnerability?_s_id=c
ration-aide/vulnerability/wordpress-user-registration-aide-plugin-1-5-3-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53241 State: PUBLISHED Published: 2025-08-14T18:22:00.994Z Last Updated: 2025-08-14T20:06:42.003Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: kodeshpa Products: Simplified Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in kodeshpa Simplified allows Server Side Request Forgery. This issue affects Simplified: from n/a through 1.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simplified/vulnerability/wordpress-simplified-plugin-plugin-1-0-9-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53242 State: PUBLISHED Published: 2025-11-06T15:53:58.962Z Last Updated: 2025-11-13T10:33:42.267Z Vendors: VictorThemes Products: Seil Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in VictorThemes Seil seil allows Object Injection.This issue affects Seil: from n/a through <= 1.7.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/seil/vulnerability/wordpress-seil-theme-1-7-1-deserialization-of-untrusted-data-vulnerability?_s_id=cve
CVE ID: CVE-2025-53243 State: PUBLISHED Published: 2025-08-28T12:37:23.019Z Last Updated: 2025-08-28T14:19:37.956Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: emarket-design Products: Employee Directory – Staff Listing &amp; Team Directory Plugin for WordPress Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in emarket-design Employee Directory – Staff Listing &amp; Team Directory Plugin for WordPress allows Object Injection. This issue affects Employee Directory – Staff Listing &amp; Team Directory Plugin for WordPress: from n/a through 4.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patch
in for WordPress: from n/a through 4.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/employee-directory/vulnerability/wordpress-employee-directory-staff-listing-team-directory-plugin-for-wordpress-plugin-4-5-2-php-object-injection-vulnerability?_s_id=cve