Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
: - https://patchstack.com/database/wordpress/plugin/redirect-to-welcome-or-landing-page/vulnerability/wordpress-redirect-wordpress-to-welcome-or-landing-page-plugin-2-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-39418 State: PUBLISHED Published: 2025-04-17T15:17:10.453Z Last Updated: 2025-04-17T15:52:22.863Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ajayver Products: RSS Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ajayver RSS Manager allows Stored XSS. This issue affects RSS Manager: from n/a through 0.06. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rss-manager/vulnerability/wordpress-rss-manager-plugin-0-06-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-39419 State: PUBLISHED Published: 2025-04-17T15:17:09.630Z Last Updated: 2025-04-17T18:44:28.638Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: David Miller Products: Revision Diet Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in David Miller Revision Diet allows Stored XSS. This issue affects Revision Diet: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/revision-diet/vulnerability/wordpress-revision-diet-plugin-1-0-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-39420 State: PUBLISHED Published: 2025-04-17T15:17:08.816Z Last Updated: 2025-04-17T18:44:36.473Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ruudkok Products: WP Twitter Button Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ruudkok WP Twitter Button allows Stored XSS. This issue affects WP Twitter Button: from n/a through 1.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-twitter-button/vulnerability/wordpress-wp-twitter-button-plugin-1-4-1-cross-site-request-forgery-csrf-vulner
s/plugin/wp-twitter-button/vulnerability/wordpress-wp-twitter-button-plugin-1-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-39421 State: PUBLISHED Published: 2025-04-17T15:17:07.891Z Last Updated: 2025-04-17T16:05:21.925Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Mustafa KUCUK Products: WP Sticky Side Buttons Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mustafa KUCUK WP Sticky Side Buttons allows Stored XSS. This issue affects WP Sticky Side Buttons: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-sticky-side-buttons/vulnerability/wordpress-wp-sticky-side-buttons-plugin-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-39422 State: PUBLISHED Published: 2025-04-17T15:17:07.040Z Last Updated: 2025-04-17T16:05:48.459Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: PResponsive Products: WP Social Bookmarking Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in PResponsive WP Social Bookmarking allows Stored XSS. This issue affects WP Social Bookmarking: from n/a through 3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-social-bookmarking/vulnerability/wordpress-wp-social-bookmarking-plugin-3-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-39423 State: PUBLISHED Published: 2025-04-17T15:17:06.219Z Last Updated: 2025-04-17T16:06:12.063Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Jenst Products: Add to Header Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Jenst Add to Header allows Stored XSS. This issue affects Add to Header: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/add-to-header/vulnerability/wordpress-add-to-header-plugin-1-0-csrf-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-39424 State: PUBLISHED Published: 2025-04-17T15:17:05.305Z Last Updated: 2025-04-17T16:06:43.523Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: simplemaps Products: Simple Maps Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in simplemaps Simple Maps allows Stored XSS. This issue affects Simple Maps: from n/a through 0.98. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/interactive-maps/vulnerability/wordpress-simple-maps-plugin-0-98-csrf-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-39425 State: PUBLISHED Published: 2025-04-17T15:17:04.438Z Last Updated: 2025-04-17T16:07:41.304Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: pixelgrade Products: Style Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in pixelgrade Style Manager allows Cross Site Request Forgery. This issue affects Style Manager: from n/a through 2.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/style-manager/vulnerability/wordpress-style-manager-plugin-2-2-7-cross-site-request-forgery-csrf-to-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-39426 State: PUBLISHED Published: 2025-04-17T15:17:03.650Z Last Updated: 2025-04-17T16:08:34.339Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: illow Products: illow – Cookies Consent Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in illow illow – Cookies Consent allows Cross Site Request Forgery. This issue affects illow – Cookies Consent: from n/a through 0.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/lgpd-compliant-cookie-banner/vulnerability/wordpress-illow-cookies-consent-plugin-0-2-0-cross-site-request-forgery-csrf-vulnerabi
liant-cookie-banner/vulnerability/wordpress-illow-cookies-consent-plugin-0-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-39427 State: PUBLISHED Published: 2025-04-17T15:17:02.846Z Last Updated: 2025-04-17T16:08:56.400Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Beth Tucker Long Products: WP Post to PDF Enhanced Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beth Tucker Long WP Post to PDF Enhanced allows Stored XSS. This issue affects WP Post to PDF Enhanced: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-post-to-pdf-enhanced/vulnerability/wordpress-wp-post-to-pdf-enhanced-p
tps://patchstack.com/database/wordpress/plugin/wp-post-to-pdf-enhanced/vulnerability/wordpress-wp-post-to-pdf-enhanced-plugin-1-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-39428 State: PUBLISHED Published: 2025-04-17T15:17:01.936Z Last Updated: 2025-04-17T17:11:31.793Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Maros Pristas Products: Gravity Forms CSS Themes with Fontawesome and Placeholders Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maros Pristas Gravity Forms CSS Themes with Fontawesome and Placeholders allows Stored XSS. This issue affects Gravity Forms CSS Themes with Fontawesome and Placeholders: from n/a through 8.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/da
olders: from n/a through 8.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gravity-forms-css-themes-with-fontawesome-and-placeholder-support/vulnerability/wordpress-gravity-forms-css-themes-with-fontawesome-and-placeholders-plugin-8-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-39429 State: PUBLISHED Published: 2025-04-17T15:17:01.096Z Last Updated: 2025-04-17T15:50:22.559Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Földesi, Mihály Products: Széchenyi 2020 Logo Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Földesi, Mihály Széchenyi 2020 Logo allows PHP Local File Inclusion. This issue affects Széchenyi 2020 Logo: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/szechenyi-2020-logo/vulnerability/wordpress-szechenyi-2020
eferences: - https://patchstack.com/database/wordpress/plugin/szechenyi-2020-logo/vulnerability/wordpress-szechenyi-2020-logo-1-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-39430 State: PUBLISHED Published: 2025-04-17T15:17:00.249Z Last Updated: 2025-04-17T15:50:51.061Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Alexander Rauscha Products: mLanguage Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Alexander Rauscha mLanguage allows Stored XSS. This issue affects mLanguage: from n/a through 1.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mlanguage/vulnerability/wordpress-mlanguage-plugin-1-6-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-39431 State: PUBLISHED Published: 2025-04-17T15:16:59.280Z Last Updated: 2025-04-17T18:44:45.974Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Aaron Forgue Products: Amazon Showcase WordPress Plugin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Aaron Forgue Amazon Showcase WordPress Plugin allows Stored XSS. This issue affects Amazon Showcase WordPress Plugin: from n/a through 2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/amazon-showcase-wordpress-widget/vulnerability/wordpress-amazon-showcase-wordpress-plugin-plugin-2-2-csrf-to
ress/plugin/amazon-showcase-wordpress-widget/vulnerability/wordpress-amazon-showcase-wordpress-plugin-plugin-2-2-csrf-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-39432 State: PUBLISHED Published: 2025-04-17T15:16:58.469Z Last Updated: 2025-04-17T18:44:55.903Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: antonchanning Products: bbPress2 shortcode whitelist Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in antonchanning bbPress2 shortcode whitelist allows Stored XSS. This issue affects bbPress2 shortcode whitelist: from n/a through 2.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bbpress2-shortcode-whitelist/vulnerability/wordpress-bbpress2-shor
s: - https://patchstack.com/database/wordpress/plugin/bbpress2-shortcode-whitelist/vulnerability/wordpress-bbpress2-shortcode-whitelist-plugin-2-2-1-csrf-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-39433 State: PUBLISHED Published: 2025-04-17T15:16:57.647Z Last Updated: 2025-04-17T18:45:07.152Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: beke_ro Products: Bknewsticker Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in beke_ro Bknewsticker allows Stored XSS. This issue affects Bknewsticker: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bknewsticker/vulnerability/wordpress-bknewsticker-plugin-1-0-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-39434 State: PUBLISHED Published: 2025-04-17T15:16:56.834Z Last Updated: 2025-04-17T18:45:18.366Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Scott Taylor Products: Avatar Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Scott Taylor Avatar allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Avatar: from n/a through 0.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/avatar/vulnerability/wordpress-avatar-plugin-0-1-4-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE ID: CVE-2025-39435 State: PUBLISHED Published: 2025-04-17T15:16:56.011Z Last Updated: 2025-04-17T18:45:26.299Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: davidfcarr Products: My Marginalia Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in davidfcarr My Marginalia allows Stored XSS. This issue affects My Marginalia: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/my-marginalia/vulnerability/wordpress-my-marginalia-plugin-1-0-6-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-39436 State: PUBLISHED Published: 2025-04-17T15:16:55.185Z Last Updated: 2025-04-17T15:51:18.166Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: aidraw Products: I Draw Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in aidraw I Draw allows Using Malicious Files. This issue affects I Draw: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/idraw/vulnerability/wordpress-i-draw-1-0-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-39437 State: PUBLISHED Published: 2025-04-17T15:16:54.327Z Last Updated: 2025-04-17T15:51:39.401Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Boone Gorges Products: Anthologize Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Boone Gorges Anthologize allows Cross Site Request Forgery. This issue affects Anthologize: from n/a through 0.8.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/anthologize/vulnerability/wordpress-anthologize-plugin-0-8-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-39438 State: PUBLISHED Published: 2025-04-17T15:16:53.443Z Last Updated: 2025-04-17T15:52:00.295Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: momen2009 Products: Theme Changer Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in momen2009 Theme Changer allows Cross Site Request Forgery. This issue affects Theme Changer: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/theme-changer/vulnerability/wordpress-theme-changer-plugin-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-39439 State: PUBLISHED Published: 2025-04-17T15:16:52.531Z Last Updated: 2025-04-17T15:52:27.729Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Markus Drubba Products: wpLike2Get Problem Types: CWE-497 Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Markus Drubba wpLike2Get allows Retrieve Embedded Sensitive Data. This issue affects wpLike2Get: from n/a through 1.2.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wplike2get/vulnerability/wordpress-wplike2get-plugin-1-2-9-sensitive-data-exposure-vulnerability?_s_id=cv
rdpress/plugin/wplike2get/vulnerability/wordpress-wplike2get-plugin-1-2-9-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-39440 State: PUBLISHED Published: 2025-04-17T15:16:51.708Z Last Updated: 2025-04-17T15:58:14.144Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Rajesh Products: Broken Links Remover Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Rajesh Broken Links Remover allows Stored XSS. This issue affects Broken Links Remover: from n/a through 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/broken-links-remover/vulnerability/wordpress-broken-links-remover-plugin-1-2-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-39441 State: PUBLISHED Published: 2025-04-17T15:16:50.867Z Last Updated: 2025-04-17T15:58:53.505Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: swedish boy Products: Dashboard Notepads Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in swedish boy Dashboard Notepads allows Stored XSS. This issue affects Dashboard Notepads: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dashboard-notepads/vulnerability/wordpress-dashboard-notepads-plugin-1-2-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-39442 State: PUBLISHED Published: 2025-04-17T15:16:49.917Z Last Updated: 2025-04-17T15:59:19.317Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: MessageMetric Products: Review Wave – Google Places Reviews Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in MessageMetric Review Wave – Google Places Reviews allows Stored XSS. This issue affects Review Wave – Google Places Reviews: from n/a through 1.4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/review-wave-google-places-reviews/vulnerability/wordpress-review-wave-google-places-reviews-plu
atabase/wordpress/plugin/review-wave-google-places-reviews/vulnerability/wordpress-review-wave-google-places-reviews-plugin-1-4-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-39443 State: PUBLISHED Published: 2025-04-17T15:15:44.162Z Last Updated: 2025-04-17T17:11:56.748Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Soft8Soft LLC Products: Verge3D Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Soft8Soft LLC Verge3D allows Cross Site Request Forgery. This issue affects Verge3D: from n/a through 4.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/verge3d/vulnerability/wordpress-verge3d-plugin-4-9-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-39444 State: PUBLISHED Published: 2025-04-17T15:16:48.145Z Last Updated: 2025-05-14T12:50:47.855Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Maxfoundry Products: MaxButtons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Maxfoundry MaxButtons allows Stored XSS.This issue affects MaxButtons: from n/a through 9.8.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/maxbuttons/vulnerability/wordpress-maxbuttons-plugin-9-8-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-39445 State: PUBLISHED Published: 2025-05-19T18:56:59.117Z Last Updated: 2025-05-19T21:22:24.562Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: highwarden Products: Super Store Finder Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder allows SQL Injection.This issue affects Super Store Finder: from n/a through 7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/superstorefinder-wp/vulnerability/wordpress-super-store-finder-7-2-sql-injection-vulnerability?_s_
base/wordpress/plugin/superstorefinder-wp/vulnerability/wordpress-super-store-finder-7-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-39446 State: PUBLISHED Published: 2025-05-19T18:55:54.932Z Last Updated: 2025-05-19T21:22:29.914Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Pluggabl LLC Products: Booster Plus for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluggabl LLC Booster Plus for WooCommerce allows Reflected XSS.This issue affects Booster Plus for WooCommerce: from n/a through 7.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/booster-plus-for-woocommerce/vulnerability/wordpress-booster-plus-
s: - https://patchstack.com/database/wordpress/plugin/booster-plus-for-woocommerce/vulnerability/wordpress-booster-plus-for-woocommerce-plugin-7-2-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-39447 State: PUBLISHED Published: 2025-05-19T18:51:31.986Z Last Updated: 2025-05-19T21:22:35.904Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Crocoblock Products: JetElements For Elementor Problem Types: CWE-862 Description: Missing Authorization vulnerability in Crocoblock JetElements For Elementor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetElements For Elementor: from n/a through 2.7.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/jet-elements/vulnerability/wordpress-jetelements-for-elementor-2-7-4-1-broken-access-control-vul
tabase/wordpress/plugin/jet-elements/vulnerability/wordpress-jetelements-for-elementor-2-7-4-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-39448 State: PUBLISHED Published: 2025-05-19T17:33:17.762Z Last Updated: 2025-05-20T13:11:18.455Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Crocoblock Products: JetElements For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.7.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/jet-elements/vulnerability/wordpress-jetelements-for-elementor-plugin-2-7-4-1-
/patchstack.com/database/wordpress/plugin/jet-elements/vulnerability/wordpress-jetelements-for-elementor-plugin-2-7-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-39449 State: PUBLISHED Published: 2025-05-19T18:50:35.578Z Last Updated: 2025-05-19T21:22:43.171Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Crocoblock Products: JetWooBuilder Problem Types: CWE-862 Description: Missing Authorization vulnerability in Crocoblock JetWooBuilder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetWooBuilder: from n/a through 2.1.18. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/jet-woo-builder/vulnerability/wordpress-jetwoobuilder-2-1-18-broken-access-control-vulnerability?_s_id=cve