Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-1279 State: PUBLISHED Published: 2025-04-25T08:22:13.773Z Last Updated: 2025-04-25T16:01:35.908Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SeaTheme Products: BM Content Builder Problem Types: CWE-862 Description: The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ux_cb_tools_import_item_ajax AJAX action in all versions up to, and including, 3.16.2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to u
s, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e4632899-c3bf-48f3-8a69-8fa32bfd902d?source=cve - https://themeforest.net/item/art-simple-clean-wordpress-theme-for-creatives/20170299
CVE ID: CVE-2025-1282 State: PUBLISHED Published: 2025-02-27T08:22:04.186Z Last Updated: 2025-02-27T14:35:51.725Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ThemeMakers Products: Car Dealer Automotive WordPress Theme – Responsive Problem Types: CWE-22 Description: The Car Dealer Automotive WordPress Theme – Responsive theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_post_photo() and add_car() functions in all versions up to, and including, 1.6.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can ea
r authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The add_car() function may also make it possible to read arbitrary files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/edf4b588-8b67-425a-b0e1-d4382cb88dd1?source=cve - https://themeforest.net/item/car-dealer-automotive-wordpress-theme-responsive/8574708?s_rank=7
CVE ID: CVE-2025-1283 State: PUBLISHED Published: 2025-02-13T21:11:45.840Z Last Updated: 2025-02-14T15:48:05.939Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dingtian Products: DT-R002, DT-R008, DT-R016, DT-R032 Problem Types: CWE-288 Description: The Dingtian DT-R0 Series is vulnerable to an exploit that allows attackers to bypass login requirements by directly navigating to the main page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-18 - https://www.dingtian-tech.com/en_us/aboutus.html?tab=contact_us
CVE ID: CVE-2025-1284 State: PUBLISHED Published: 2025-04-24T08:23:48.546Z Last Updated: 2025-04-24T15:22:43.997Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: xpertsclub Products: Woocommerce Automatic Order Printing | ( Formerly WooCommerce Google Cloud Print) Problem Types: CWE-639 Description: The Woocommerce Automatic Order Printing | ( Formerly WooCommerce Google Cloud Print) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1 via the xc_woo_printer_preview AJAX action due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-lev
to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view other user's invoices and orders which can contain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6f593dce-4b56-46c0-becd-75fd16f165a8?source=cve - https://codecanyon.net/item/woocommerce-google-cloud-print/21129093
CVE ID: CVE-2025-1285 State: PUBLISHED Published: 2025-03-14T04:22:32.126Z Last Updated: 2025-03-14T15:13:58.496Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: SmartDataSoft Products: Resido - Real Estate WordPress Theme Problem Types: CWE-862 Description: The Resido - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the delete_api_key and save_api_key AJAX actions in all versions up to, and including, 3.6. This makes it possible for unauthenticated attackers to issue requests to internal services and update API key details. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
e requests to internal services and update API key details. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3512ce8f-b7a6-4a6f-a141-bca08c183882?source=cve - https://themeforest.net/item/resido-real-estate-wordpress-theme/31804443
CVE ID: CVE-2025-1286 State: PUBLISHED Published: 2025-05-15T20:07:26.094Z Last Updated: 2025-05-20T19:11:50.307Z Vendors: Unknown Products: Download HTML TinyMCE Button Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Download HTML TinyMCE Button WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c42556c7-09b6-49ae-9f87-cbaf16e7c280/
CVE ID: CVE-2025-1287 State: PUBLISHED Published: 2025-03-08T08:22:57.600Z Last Updated: 2025-03-11T16:08:14.808Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: posimyththemes Products: The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce Problem Types: CWE-79 Description: The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown, Syntax Highlighter, and Page Scroll widgets in all versions up to, and including, 6.2.2 due to insufficient input sanitization and output escaping. This makes
gets in all versions up to, and including, 6.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fbf86da7-621d-4fb7-ba16-d132db5b602a?source=cve - https://plugins.trac.wordpress.org/browser/the-plus-addons-for-elementor-page-builder/tags/6.2.0/modules/widgets/tp_countdown.php#L1868 - https://plugins.trac.wordpress.org/browser/the-plus-addons-for-elementor-page-builder
s/widgets/tp_countdown.php#L1868 - https://plugins.trac.wordpress.org/browser/the-plus-addons-for-elementor-page-builder/tags/6.2.0/modules/widgets/tp_page_scroll.php#L1015 - https://plugins.trac.wordpress.org/browser/the-plus-addons-for-elementor-page-builder/tags/6.2.0/modules/widgets/tp_syntax_highlighter.php#L1043 - https://plugins.trac.wordpress.org/changeset/3252092/
CVE ID: CVE-2025-1288 State: PUBLISHED Published: 2025-05-15T20:07:26.315Z Last Updated: 2025-05-20T18:34:55.127Z Vendors: Unknown Products: WOOEXIM Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS via a CSRF attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/175af35d-6972-42c9-b7ac-913ce1fbac64/
CVE ID: CVE-2025-1289 State: PUBLISHED Published: 2025-05-15T20:07:26.517Z Last Updated: 2025-05-20T18:35:21.770Z Vendors: Unknown Products: Plugin Oficial Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Plugin Oficial WordPress plugin through 1.7.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/5a296b59-f305-49a2-88b8-fca998f2c43e/
CVE ID: CVE-2025-1290 State: PUBLISHED Published: 2025-04-17T00:13:35.225Z Last Updated: 2025-05-08T19:15:07.309Z Vendors: Google Products: ChromeOS Problem Types: Use-After-Free (UAF) Description: A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS. Concurrent allocation and freeing of the virtio_vsock_sock structure during an AF_VSOCK connect syscall can occur before a worker thread accesses it resulting in a dangling pointer and potential kernel code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issuetracker.google.com/issues/301886931 - https://issues.chromium.org/issues
SA ADP Vulnrichment: References: - https://issuetracker.google.com/issues/301886931 - https://issues.chromium.org/issues/b/301886931
CVE ID: CVE-2025-1291 State: PUBLISHED Published: 2025-03-01T08:23:20.853Z Last Updated: 2025-03-03T17:38:15.111Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: britner Products: Gutenberg Blocks with AI by Kadence WP – Page Builder Features Problem Types: CWE-79 Description: The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘icon’ parameter in all versions up to, and including, 3.4.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts i
akes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9df00907-c95e-445c-b424-78a1e5e00e4f?source=cve - https://plugins.trac.wordpress.org/browser/kadence-blocks/trunk/includes/blocks/class-kadence-blocks-testimonial-block.php#L219 - https://plugins.trac.wordpress.org/changeset/3246675/
CVE ID: CVE-2025-1292 State: PUBLISHED Published: 2025-04-15T19:46:26.679Z Last Updated: 2025-04-17T19:41:04.480Z Vendors: Google Products: ChromeOS Problem Types: Out-of-bounds Write Description: Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 122.0.6261.132 stable on Cr50 Boards allows an attacker with root access to gain persistence and bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issuetracker.google.com/issues/324336238 - https://issues.chromium.org/issues/b/324336238
CVE ID: CVE-2025-1293 State: PUBLISHED Published: 2025-02-20T00:28:37.246Z Last Updated: 2025-02-20T14:24:57.660Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) Vendors: HashiCorp Products: Tooling Problem Types: CWE-1390 Description: Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2025-03-hashicorp-hermes-improperly-validates-aws-alb-jwts-which-may-lead-to-authentication-bypass/73371
CVE ID: CVE-2025-1294 State: PUBLISHED Published: 2025-04-24T22:22:14.575Z Last Updated: 2025-04-25T16:05:22.062Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: WPQuark Products: eForm - WordPress Form Builder Problem Types: CWE-79 Description: The eForm - WordPress Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.18.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References
at will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6c5db375-e865-47ba-a3dd-462c55d066fd?source=cve - https://codecanyon.net/item/eform-wordpress-form-builder/3180835 - https://eform.live/changelog/
CVE ID: CVE-2025-1295 State: PUBLISHED Published: 2025-02-27T05:23:04.516Z Last Updated: 2025-02-27T14:42:47.733Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Templines Products: Templines Elementor Helper Core Problem Types: CWE-269 Description: The Templines Elementor Helper Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.7. This is due to allowing arbitrary user meta updates. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update their role to Administrator. The vulnerability can only be exploited when the BuddyPress plugin is also installed and activat
role to Administrator. The vulnerability can only be exploited when the BuddyPress plugin is also installed and activated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8c5aa062-b9a2-4ddb-a5bf-4c8368218e85?source=cve - http://localhost:1337/wp-content/plugins/templines-helper-core/youzify/youzify.php#L3082
CVE ID: CVE-2025-1296 State: PUBLISHED Published: 2025-03-10T18:02:21.579Z Last Updated: 2025-03-11T20:18:55.186Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: HashiCorp Products: Nomad, Nomad Enterprise Problem Types: CWE-532 Description: Nomad Community and Nomad Enterprise (“Nomad”) are vulnerable to unintentional exposure of the workload identity token and client secret token in audit logs. This vulnerability, identified as CVE-2025-1296, is fixed in Nomad Community Edition 1.9.7 and Nomad Enterprise 1.9.7, 1.8.11, and 1.7.19. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2025-04-nomad-exposes-se
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://discuss.hashicorp.com/t/hcsec-2025-04-nomad-exposes-sensitive-workload-identity-and-client-secret-token-in-audit-logs/73737
CVE ID: CVE-2025-1297 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:37.287Z Description: No description available.
CVE ID: CVE-2025-1298 State: PUBLISHED Published: 2025-02-14T07:40:02.479Z Last Updated: 2025-09-05T06:25:51.524Z Vendors: TECNO Products: com.transsion.carlcare Problem Types: CWE-290 Description: Logic vulnerability in the mobile application (com.transsion.carlcare) may lead to the risk of account takeover. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.tecno.com/SRC/blogdetail/383?lang=en_US - https://security.tecno.com/SRC/securityUpdates
CVE ID: CVE-2025-1299 State: PUBLISHED Published: 2025-07-24T06:33:28.184Z Last Updated: 2025-07-24T13:36:27.415Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-862 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 18.0.5, all versions starting from 18.1 before 18.1.3, all versions starting from 18.2 before 18.2.1 that, under circumstances, could have allowed an unauthorized user to read deployment job logs by sending a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/519696 - http
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/519696 - https://hackerone.com/reports/2969145
CVE ID: CVE-2025-1300 State: PUBLISHED Published: 2025-02-28T12:47:19.205Z Last Updated: 2025-02-28T14:39:43.357Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Ericsson Products: CodeChecker Problem Types: CWE-601 Description: CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. The CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassing the protections against CVE-2021-28861, leading to the same open redirect pathway. This issue affects CodeChecker: through 6.24.5. Additio
ainst CVE-2021-28861, leading to the same open redirect pathway. This issue affects CodeChecker: through 6.24.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Ericsson/codechecker/security/advisories/GHSA-g839-x3p3-g5fm
CVE ID: CVE-2025-1301 State: PUBLISHED Published: 2025-05-02T10:59:41.412Z Last Updated: 2025-09-12T07:12:30.946Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Yordam Informatics Products: Library Automation System Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Yordam Informatics Library Automation System allows Reflected XSS.This issue affects Library Automation System: before 21.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0100
CVE ID: CVE-2025-1302 State: PUBLISHED Published: 2025-02-15T05:00:01.061Z Last Updated: 2025-02-18T20:32:41.833Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P) Vendors: n/a Products: jsonpath-plus Problem Types: CWE-94 Description: Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode. **Note:** This is caused by an incomplete fix for [CVE-2024-21534](https://security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-7945884). Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
https://security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-7945884). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-8719585 - https://gist.github.com/nickcopi/11ba3cb4fdee6f89e02e6afae8db6456 - https://github.com/JSONPath-Plus/JSONPath/blob/8e4acf8aff5f446aa66323e12394ac5615c3b260/src/Safe-Script.js%23L127 - https://github.com/JSONPath-Plus/JSONPath/commit/30942896d27cb8a806b965a5ca9ef9f686be24ee
CVE ID: CVE-2025-1303 State: PUBLISHED Published: 2025-05-15T20:07:26.705Z Last Updated: 2025-05-20T17:39:20.947Z Vendors: Unknown Products: Plugin Oficial Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Plugin Oficial WordPress plugin through 1.7.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticated users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/35181798-4f21-4c8d-bb6e-61eb13683a74/
CVE ID: CVE-2025-1304 State: PUBLISHED Published: 2025-05-01T03:23:39.579Z Last Updated: 2025-05-01T13:22:21.753Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: spicethemes Products: NewsBlogger Problem Types: CWE-862 Description: The NewsBlogger theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the newsblogger_install_and_activate_plugin() function in all versions up to, and including, 0.2.5.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes:
arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/85cea6b5-d57b-495e-a504-a0c1ba691637?source=cve - https://themes.trac.wordpress.org/browser/newsblogger/0.2/functions.php#L440 - https://themes.trac.wordpress.org/browser/newsblogger/0.2/functions.php#L461 - https://themes.trac.wordpress.org/browser/newsblogger/0.2/functions.php#L470 - https://themes.trac.wordpress.org/browser/newsblogger/0.2.5.5/functions.php?annotate=blame&rev=269615#file2
CVE ID: CVE-2025-1305 State: PUBLISHED Published: 2025-05-01T03:23:39.014Z Last Updated: 2025-05-01T13:22:53.910Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: spicethemes Products: NewsBlogger Problem Types: CWE-352 Description: The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.5.4. This is due to missing or incorrect nonce validation on the newsblogger_install_and_activate_plugin() function. This makes it possible for unauthenticated attackers to upload arbitrary files and achieve remote code execution via a forged request granted they can trick a site administrator into performing an
s and achieve remote code execution via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7b2cac27-4a36-490f-b2d8-3c6f32843a38?source=cve - https://themes.trac.wordpress.org/browser/newsblogger/0.2/functions.php#L440 - https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=269615%40newsblogger&new=269615%40newsblogger&sfp_email=&sfph_mail=
CVE ID: CVE-2025-1306 State: PUBLISHED Published: 2025-03-04T04:26:08.747Z Last Updated: 2025-03-11T16:09:08.874Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: spicethemes Products: Newscrunch Problem Types: CWE-352 Description: The Newscrunch theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.4. This is due to missing or incorrect nonce validation on the newscrunch_install_and_activate_plugin() function. This makes it possible for unauthenticated attackers to upload arbitrary files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Addi
a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1c507681-61e9-4bf0-8fe5-e2f401a7a8be?source=cve - https://themes.trac.wordpress.org/browser/newscrunch/1.8.3/functions.php#L486 - https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=261789%40newscrunch&new=261789%40newscrunch&sfp_email=&sfph_mail=