Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-31877 State: PUBLISHED Published: 2025-04-01T14:52:14.025Z Last Updated: 2025-04-01T15:47:12.632Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Magnigenie Products: RestroPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in Magnigenie RestroPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects RestroPress: from n/a through 3.1.8.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/restropress/vulnerability/wordpress-restropress-plugin-3-1-8-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31878 State: PUBLISHED Published: 2025-04-01T14:52:14.564Z Last Updated: 2025-04-01T16:21:37.280Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Dmitry V. (CEO of "UKR Solution") Products: UPC/EAN/GTIN Code Generator Problem Types: CWE-862 Description: Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") UPC/EAN/GTIN Code Generator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects UPC/EAN/GTIN Code Generator: from n/a through 2.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/upc-ean-barcode-generator/vulnerabi
ISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/upc-ean-barcode-generator/vulnerability/wordpress-upc-ean-gtin-code-generator-plugin-2-0-2-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-31879 State: PUBLISHED Published: 2025-04-01T14:52:15.105Z Last Updated: 2025-04-01T16:21:16.792Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Dmitry V. (CEO of "UKR Solution") Products: Barcode Generator for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Generator for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Barcode Generator for WooCommerce: from n/a through 2.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/embedding-barcode
Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/embedding-barcodes-into-product-pages-and-orders/vulnerability/wordpress-barcode-generator-for-woocommerce-plugin-2-0-4-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-31880 State: PUBLISHED Published: 2025-04-01T14:52:15.664Z Last Updated: 2025-04-01T15:42:11.179Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Stylemix Products: Pearl Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Stylemix Pearl allows Cross Site Request Forgery. This issue affects Pearl: from n/a through 1.3.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pearl-header-builder/vulnerability/wordpress-pearl-plugin-1-3-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31881 State: PUBLISHED Published: 2025-04-01T14:52:16.185Z Last Updated: 2025-04-01T15:41:13.108Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Stylemix Products: Pearl Problem Types: CWE-862 Description: Missing Authorization vulnerability in Stylemix Pearl allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pearl: from n/a through 1.3.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pearl-header-builder/vulnerability/wordpress-pearl-plugin-1-3-9-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31882 State: PUBLISHED Published: 2025-04-01T14:52:16.704Z Last Updated: 2025-04-01T15:40:52.926Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: WPWebinarSystem Products: WebinarPress Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPWebinarSystem WebinarPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WebinarPress: from n/a through 1.33.27. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-webinarsystem/vulnerability/wordpress-wordpress-webinar-plugin-1-33-27-broken-access-control-vulnerability?_s_i
lugin/wp-webinarsystem/vulnerability/wordpress-wordpress-webinar-plugin-1-33-27-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31883 State: PUBLISHED Published: 2025-04-01T14:52:17.221Z Last Updated: 2025-04-01T16:31:13.706Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: WPWebinarSystem Products: WebinarPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPWebinarSystem WebinarPress allows Stored XSS. This issue affects WebinarPress: from n/a through 1.33.27. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-webinarsystem/vulnerability/wordpress-webinarpress-plugin-1-33-27-cross-site-scripting-xss-vulnerabilit
dpress/plugin/wp-webinarsystem/vulnerability/wordpress-webinarpress-plugin-1-33-27-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31884 State: PUBLISHED Published: 2025-04-01T14:52:17.756Z Last Updated: 2025-04-01T16:30:29.323Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WP CMS Ninja Products: Norse Rune Oracle Plugin Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP CMS Ninja Norse Rune Oracle Plugin allows Stored XSS. This issue affects Norse Rune Oracle Plugin: from n/a through 1.4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/norse-runes-oracle/vulnerability/wordpress-norse-rune-oracle-plugin-plugin-1-4
/patchstack.com/database/wordpress/plugin/norse-runes-oracle/vulnerability/wordpress-norse-rune-oracle-plugin-plugin-1-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31885 State: PUBLISHED Published: 2025-04-01T14:52:18.288Z Last Updated: 2025-04-01T15:40:29.469Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Daniel Floeter Products: Hyperlink Group Block Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daniel Floeter Hyperlink Group Block allows DOM-Based XSS. This issue affects Hyperlink Group Block: from n/a through 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hyperlink-group-block/vulnerability/wordpress-hyperlink-group-block-plugin-2-0-1
atchstack.com/database/wordpress/plugin/hyperlink-group-block/vulnerability/wordpress-hyperlink-group-block-plugin-2-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31886 State: PUBLISHED Published: 2025-04-01T14:52:18.807Z Last Updated: 2025-04-01T15:40:07.905Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Repuso Products: Social proof testimonials and reviews by Repuso Problem Types: CWE-862 Description: Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Social proof testimonials and reviews by Repuso: from n/a through 5.21. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/social-testimonials-and-review
: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/social-testimonials-and-reviews-widget/vulnerability/wordpress-social-proof-testimonials-and-reviews-by-repuso-plugin-5-21-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31887 State: PUBLISHED Published: 2025-04-01T14:52:19.326Z Last Updated: 2025-04-01T15:39:37.965Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: zookatron Products: MyBookProgress by Stormhill Media Problem Types: CWE-862 Description: Missing Authorization vulnerability in zookatron MyBookProgress by Stormhill Media allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MyBookProgress by Stormhill Media: from n/a through 1.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mybookprogress/vulnerability/wordpress-mybookprogress-plugin-1-0-
es: - https://patchstack.com/database/wordpress/plugin/mybookprogress/vulnerability/wordpress-mybookprogress-plugin-1-0-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31888 State: PUBLISHED Published: 2025-04-01T14:52:19.871Z Last Updated: 2025-04-01T15:38:43.531Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WPExperts.io Products: WP Multistore Locator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WPExperts.io WP Multistore Locator allows Cross Site Request Forgery. This issue affects WP Multistore Locator: from n/a through 2.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-multi-store-locator/vulnerability/wordpress-wp-multi-store-locator-plugin-2-5-2-cross-site-request-forgery-csrf-vulner
p-multi-store-locator/vulnerability/wordpress-wp-multi-store-locator-plugin-2-5-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31889 State: PUBLISHED Published: 2025-04-01T20:58:15.304Z Last Updated: 2025-04-02T14:04:59.539Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: petesheppard84 Products: Extensions for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in petesheppard84 Extensions for Elementor. This issue affects Extensions for Elementor: from n/a through 2.0.40. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/extensions-for-elementor/vulnerability/wordpress-extensions-for-elementor-plugin-2-0-40-cro
om/database/wordpress/plugin/extensions-for-elementor/vulnerability/wordpress-extensions-for-elementor-plugin-2-0-40-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31890 State: PUBLISHED Published: 2025-04-01T14:52:20.445Z Last Updated: 2025-04-01T15:38:20.115Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Mashi Products: Simple Map No Api Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mashi Simple Map No Api allows Stored XSS. This issue affects Simple Map No Api: from n/a through 1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-map-no-api/vulnerability/wordpress-simple-map-no-api-plugin-1-9-cross-site-scripting-xss-vulnerability?_s_id
ugin/simple-map-no-api/vulnerability/wordpress-simple-map-no-api-plugin-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31891 State: PUBLISHED Published: 2025-04-01T14:52:21.018Z Last Updated: 2025-04-01T15:38:00.599Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Gosign Products: Gosign – Posts Slider Block Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gosign Gosign – Posts Slider Block allows Stored XSS. This issue affects Gosign – Posts Slider Block: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gosign-posts-slider-block/vulnerability/wordpress-gosign-posts-slider-block-plugi
tchstack.com/database/wordpress/plugin/gosign-posts-slider-block/vulnerability/wordpress-gosign-posts-slider-block-plugin-1-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31892 State: PUBLISHED Published: 2025-04-01T14:52:21.582Z Last Updated: 2025-04-01T15:36:41.770Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Themeum Products: WP Crowdfunding Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum WP Crowdfunding allows Stored XSS. This issue affects WP Crowdfunding: from n/a through 2.1.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-crowdfunding/vulnerability/wordpress-wp-crowdfunding-plugin-2-1-13-cross-site-scripting-xss-vulnerability?_s_id
lugin/wp-crowdfunding/vulnerability/wordpress-wp-crowdfunding-plugin-2-1-13-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31893 State: PUBLISHED Published: 2025-04-03T13:27:15.343Z Last Updated: 2025-04-03T17:44:41.309Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: cheesefather Products: Botnet Attack Blocker Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cheesefather Botnet Attack Blocker allows Stored XSS. This issue affects Botnet Attack Blocker: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/botnet-attack-blocker/vulnerability/wordpress-botnet-attack-blocker-plugin-2-0-0-stored
ck.com/database/wordpress/plugin/botnet-attack-blocker/vulnerability/wordpress-botnet-attack-blocker-plugin-2-0-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31894 State: PUBLISHED Published: 2025-04-01T14:52:22.139Z Last Updated: 2025-04-03T12:54:54.678Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Infoway LLC Products: Ebook Downloader Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infoway LLC Ebook Downloader allows Stored XSS. This issue affects Ebook Downloader: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ebook-downloader/vulnerability/wordpress-ebook-downloader-plugin-1-0-cross-site-scripting-xss-vulnerabilit
dpress/plugin/ebook-downloader/vulnerability/wordpress-ebook-downloader-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31895 State: PUBLISHED Published: 2025-04-01T14:52:22.671Z Last Updated: 2025-04-01T16:29:14.394Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: paulrosen Products: ABC Notation Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in paulrosen ABC Notation allows Stored XSS. This issue affects ABC Notation: from n/a through 6.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/abc-notation/vulnerability/wordpress-abc-notation-plugin-6-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31896 State: PUBLISHED Published: 2025-04-03T13:27:15.691Z Last Updated: 2025-04-03T16:00:13.948Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: istmoplugins Products: GetBookingsWP Problem Types: CWE-862 Description: Missing Authorization vulnerability in istmoplugins GetBookingsWP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GetBookingsWP: from n/a through 1.1.27. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/get-bookings-wp/vulnerability/wordpress-getbookingswp-plugin-1-1-27-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31897 State: PUBLISHED Published: 2025-04-01T14:52:23.212Z Last Updated: 2025-04-01T16:28:25.437Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Arrow Plugins Products: Arrow Custom Feed for Twitter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arrow Plugins Arrow Custom Feed for Twitter allows Stored XSS. This issue affects Arrow Custom Feed for Twitter: from n/a through 1.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/arrow-twitter-feed/vulnerability/wordpress-arrow-custom-feed-
rences: - https://patchstack.com/database/wordpress/plugin/arrow-twitter-feed/vulnerability/wordpress-arrow-custom-feed-for-twitter-plugin-1-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31898 State: PUBLISHED Published: 2025-04-03T13:27:15.866Z Last Updated: 2025-04-03T15:59:28.490Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: MediaView Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound MediaView allows Reflected XSS. This issue affects MediaView: from n/a through 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mediaview/vulnerability/wordpress-mediaview-plugin-1-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31899 State: PUBLISHED Published: 2025-04-03T13:27:16.235Z Last Updated: 2025-04-03T15:05:19.702Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: wpshopee Products: Awesome Logos Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpshopee Awesome Logos allows Reflected XSS. This issue affects Awesome Logos: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/awesome-logos/vulnerability/wordpress-awesome-logos-plugin-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cv
awesome-logos/vulnerability/wordpress-awesome-logos-plugin-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31900 State: PUBLISHED Published: 2025-04-03T13:27:16.436Z Last Updated: 2025-04-03T15:05:10.020Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: lexicata Products: Lexicata Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lexicata Lexicata allows Reflected XSS. This issue affects Lexicata: from n/a through 1.0.16. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/lexicata/vulnerability/wordpress-lexicata-plugin-1-0-16-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31901 State: PUBLISHED Published: 2025-04-03T13:27:16.750Z Last Updated: 2025-04-03T15:04:50.285Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Digihood Products: Digihood HTML Sitemap Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digihood Digihood HTML Sitemap allows Reflected XSS. This issue affects Digihood HTML Sitemap: from n/a through 3.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wedesin-html-sitemap/vulnerability/wordpress-digihood-html-sitemap-plugin-3-1-1-reflected-cros
database/wordpress/plugin/wedesin-html-sitemap/vulnerability/wordpress-digihood-html-sitemap-plugin-3-1-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31902 State: PUBLISHED Published: 2025-04-03T13:27:16.933Z Last Updated: 2025-04-03T15:04:32.533Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Social Share And Social Locker Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Social Share And Social Locker allows Reflected XSS. This issue affects Social Share And Social Locker: from n/a through 1.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/social-share-and-social-locker-arsocial/vulnerability/wordpress-soc
: - https://patchstack.com/database/wordpress/plugin/social-share-and-social-locker-arsocial/vulnerability/wordpress-social-share-and-social-locker-plugin-1-4-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31903 State: PUBLISHED Published: 2025-04-03T13:27:17.122Z Last Updated: 2025-04-03T15:04:20.649Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: XV Random Quotes Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound XV Random Quotes allows Reflected XSS. This issue affects XV Random Quotes: from n/a through 1.37. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/xv-random-quotes/vulnerability/wordpress-xv-random-quotes-plugin-1-37-cross-site-scripting-xss-vulnerability?_
ss/plugin/xv-random-quotes/vulnerability/wordpress-xv-random-quotes-plugin-1-37-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31904 State: PUBLISHED Published: 2025-04-01T14:52:23.745Z Last Updated: 2025-04-01T16:24:14.525Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Infoway LLC Products: Ebook Downloader Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Infoway LLC Ebook Downloader allows Cross Site Request Forgery. This issue affects Ebook Downloader: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ebook-downloader/vulnerability/wordpress-ebook-downloader-plugin-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31905 State: PUBLISHED Published: 2025-04-03T13:27:17.404Z Last Updated: 2025-04-03T15:04:02.193Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Team Rosters Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Team Rosters allows Reflected XSS. This issue affects Team Rosters: from n/a through 4.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/team-rosters/vulnerability/wordpress-team-rosters-plugin-4-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31906 State: PUBLISHED Published: 2025-04-01T14:52:24.422Z Last Updated: 2025-04-01T16:19:17.657Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ProfitShare.ro Products: WP Profitshare Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ProfitShare.ro WP Profitshare allows Stored XSS. This issue affects WP Profitshare: from n/a through 1.4.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-profitshare/vulnerability/wordpress-wp-profitshare-plugin-1-4-9-csrf-to-stored-xss-vulnerability?_s_id=cve