Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-46464 State: PUBLISHED Published: 2025-05-16T15:45:22.238Z Last Updated: 2025-05-16T16:49:25.069Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: scripteo Products: Ads Pro Plugin Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in scripteo Ads Pro Plugin allows Stored XSS. This issue affects Ads Pro Plugin: from n/a through 4.88. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ap-plugin-scripteo/vulnerability/wordpress-ads-pro-plugin-4-88-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46465 State: PUBLISHED Published: 2025-04-24T16:08:46.067Z Last Updated: 2025-04-25T13:54:08.897Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: John Weissberg Products: Print Science Designer Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in John Weissberg Print Science Designer allows Stored XSS. This issue affects Print Science Designer: from n/a through 1.3.155. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/print-science-designer/vulnerability/wordpress-print-science-designer-plugin-1-3-155-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46466 State: PUBLISHED Published: 2025-04-24T16:08:46.654Z Last Updated: 2025-04-25T13:54:00.124Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: felixtz Products: Modern Polls Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in felixtz Modern Polls allows Stored XSS. This issue affects Modern Polls: from n/a through 1.0.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/modern-polls/vulnerability/wordpress-modern-polls-plugin-1-0-10-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46467 State: PUBLISHED Published: 2025-04-24T16:09:08.500Z Last Updated: 2025-04-25T13:48:44.086Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Rahendra Putra K™ Products: RAphicon Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rahendra Putra K™ RAphicon allows DOM-Based XSS. This issue affects RAphicon: from n/a through 2.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/raphicon/vulnerability/wordpress-raphicon-2-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46468 State: PUBLISHED Published: 2025-05-23T12:43:43.121Z Last Updated: 2025-05-23T14:50:20.069Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: WPFable Products: Fable Extra Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPFable Fable Extra allows PHP Local File Inclusion. This issue affects Fable Extra: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fable-extra/vulnerability/wordpress-fable-extra-1-0-5-local-file-inclusion-vulnerability?_s_
m/database/wordpress/plugin/fable-extra/vulnerability/wordpress-fable-extra-1-0-5-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-46469 State: PUBLISHED Published: 2025-04-24T16:09:20.096Z Last Updated: 2025-04-24T20:00:29.870Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Benjamin Buddle Products: Send From Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Benjamin Buddle Send From allows Stored XSS. This issue affects Send From: from n/a through 2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/send-from/vulnerability/wordpress-send-from-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46470 State: PUBLISHED Published: 2025-04-24T16:08:47.237Z Last Updated: 2025-04-25T13:53:52.003Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Peter Raschendorfer Products: Smart Hashtags [#hashtagger] Problem Types: CWE-862 Description: Missing Authorization vulnerability in Peter Raschendorfer Smart Hashtags [#hashtagger] allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Smart Hashtags [#hashtagger]: from n/a through 7.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hashtagger/vulnerability/wordpress-smart-hashtags-hashtagger
erences: - https://patchstack.com/database/wordpress/plugin/hashtagger/vulnerability/wordpress-smart-hashtags-hashtagger-7-2-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-46471 State: PUBLISHED Published: 2025-04-24T16:09:09.084Z Last Updated: 2025-04-25T13:48:31.547Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: gnanavelshenll Products: WP Custom Post Popup Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gnanavelshenll WP Custom Post Popup allows DOM-Based XSS. This issue affects WP Custom Post Popup: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-post-popup/vulnerability/wordpress-wp-custom-post-popup-1-0-1-cross-site-scr
hstack.com/database/wordpress/plugin/custom-post-popup/vulnerability/wordpress-wp-custom-post-popup-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46472 State: PUBLISHED Published: 2025-04-24T16:08:47.811Z Last Updated: 2025-04-25T13:53:44.559Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: webangon Products: The Pack Elementor addons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webangon The Pack Elementor addons allows Stored XSS. This issue affects The Pack Elementor addons: from n/a through 2.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/the-pack-addon/vulnerability/wordpress-the-pack-elementor-addons-2-1-2-cross-site-s
hstack.com/database/wordpress/plugin/the-pack-addon/vulnerability/wordpress-the-pack-elementor-addons-2-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46473 State: PUBLISHED Published: 2025-04-24T16:09:27.002Z Last Updated: 2025-04-24T19:58:55.477Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: djjmz Products: Social Counter Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in djjmz Social Counter allows Object Injection. This issue affects Social Counter: from n/a through 2.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/social-counter/vulnerability/wordpress-social-counter-2-0-5-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-46474 State: PUBLISHED Published: 2025-05-23T12:43:42.660Z Last Updated: 2025-05-23T14:50:37.750Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SEUR OFICIAL Products: SEUR Oficial Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SEUR OFICIAL SEUR Oficial allows PHP Local File Inclusion. This issue affects SEUR Oficial: from n/a through 2.2.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/seur/vulnerability/wordpress-seur-oficial-2-2-23-local-file-inclusion-vulnerabilit
chstack.com/database/wordpress/plugin/seur/vulnerability/wordpress-seur-oficial-2-2-23-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-46475 State: PUBLISHED Published: 2025-04-24T16:09:09.631Z Last Updated: 2025-04-24T20:02:45.196Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: terrillthompson Products: Able Player Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in terrillthompson Able Player allows DOM-Based XSS. This issue affects Able Player: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ableplayer/vulnerability/wordpress-able-player-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46476 State: PUBLISHED Published: 2025-04-24T16:08:48.389Z Last Updated: 2025-04-25T13:53:36.186Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: nayon46 Products: Awesome Wp Image Gallery Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nayon46 Awesome Wp Image Gallery allows Stored XSS. This issue affects Awesome Wp Image Gallery: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/awesome-wp-image-gallery/vulnerability/wordpress-awesome-wp-image-gallery-1-0-cross-site-s
com/database/wordpress/plugin/awesome-wp-image-gallery/vulnerability/wordpress-awesome-wp-image-gallery-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46477 State: PUBLISHED Published: 2025-04-24T16:09:20.659Z Last Updated: 2025-04-24T20:00:21.589Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Carlo La Pera Products: WP Customize Login Page Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Carlo La Pera WP Customize Login Page allows Stored XSS. This issue affects WP Customize Login Page: from n/a through 1.6.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-customize-login-page/vulnerability/wordpress-wp-customize-login-page-1-6-5-c
patchstack.com/database/wordpress/plugin/wp-customize-login-page/vulnerability/wordpress-wp-customize-login-page-1-6-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46478 State: PUBLISHED Published: 2025-04-24T16:08:48.936Z Last Updated: 2025-04-25T13:53:28.453Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: metaloha Products: Dropdown Content Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in metaloha Dropdown Content allows Stored XSS. This issue affects Dropdown Content: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dropdown-content/vulnerability/wordpress-dropdown-content-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46479 State: PUBLISHED Published: 2025-04-24T16:09:10.182Z Last Updated: 2025-04-24T20:02:35.725Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: DevynCJohnson Products: BBCode Deluxe Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DevynCJohnson BBCode Deluxe allows DOM-Based XSS. This issue affects BBCode Deluxe: from n/a through 2020.08.01.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bbcode-deluxe/vulnerability/wordpress-bbcode-deluxe-2020-08-01-2-cross-site-scripting-xss-vulnerabi
ase/wordpress/plugin/bbcode-deluxe/vulnerability/wordpress-bbcode-deluxe-2020-08-01-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46480 State: PUBLISHED Published: 2025-04-24T16:08:49.476Z Last Updated: 2025-04-25T13:53:21.064Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Padam Shankhadev Products: Nepali Post Date Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Padam Shankhadev Nepali Post Date allows Stored XSS. This issue affects Nepali Post Date: from n/a through 5.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/nepali-post-date/vulnerability/wordpress-nepali-post-date-5-1-1-cross-site-scripting-xss-vulne
database/wordpress/plugin/nepali-post-date/vulnerability/wordpress-nepali-post-date-5-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46481 State: PUBLISHED Published: 2025-04-24T16:09:25.310Z Last Updated: 2025-04-24T19:59:18.987Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Michael Cannon Products: Flickr Shortcode Importer Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Michael Cannon Flickr Shortcode Importer allows Object Injection. This issue affects Flickr Shortcode Importer: from n/a through 2.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/flickr-shortcode-importer/vulnerability/wordpress-flickr-shortcode-importer-2-2-3-php-object-injection-vulnerability?
in/flickr-shortcode-importer/vulnerability/wordpress-flickr-shortcode-importer-2-2-3-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-46482 State: PUBLISHED Published: 2025-04-25T07:52:09.343Z Last Updated: 2025-04-25T14:29:18.693Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: MyThemeShop Products: WP Quiz Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MyThemeShop WP Quiz allows Stored XSS.This issue affects WP Quiz: from n/a through 2.0.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-quiz/vulnerability/wordpress-wp-quiz-plugin-2-0-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46483 State: PUBLISHED Published: 2025-04-24T16:09:10.780Z Last Updated: 2025-04-24T20:02:26.022Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Alex Moss Products: Peadig’s Google +1 Button Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Moss Peadig’s Google +1 Button allows DOM-Based XSS. This issue affects Peadig’s Google +1 Button: from n/a through 0.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/google-1/vulnerability/wordpress-peadig-s-google-1-button-0-1-2-cross-site-scr
/patchstack.com/database/wordpress/plugin/google-1/vulnerability/wordpress-peadig-s-google-1-button-0-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46484 State: PUBLISHED Published: 2025-04-24T16:08:50.044Z Last Updated: 2025-04-25T13:53:10.344Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: nasir179125 Products: Image Hover Effects For WPBakery Page Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nasir179125 Image Hover Effects For WPBakery Page Builder allows DOM-Based XSS. This issue affects Image Hover Effects For WPBakery Page Builder: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/image-hover-effe
Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/image-hover-effects-for-visual-composer/vulnerability/wordpress-image-hover-effects-for-wpbakery-page-builder-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46485 State: PUBLISHED Published: 2025-04-24T16:09:21.243Z Last Updated: 2025-04-24T20:00:15.132Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Carlo La Pera Products: WP Customize Login Page Problem Types: CWE-862 Description: Missing Authorization vulnerability in Carlo La Pera WP Customize Login Page allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WP Customize Login Page: from n/a through 1.6.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-customize-login-page/vulnerability/wordpress-wp-customize-login-page-1-6-5-broken-access-con
atabase/wordpress/plugin/wp-customize-login-page/vulnerability/wordpress-wp-customize-login-page-1-6-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-46486 State: PUBLISHED Published: 2025-05-23T12:43:42.164Z Last Updated: 2025-05-23T14:50:52.917Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: totalprocessing Products: Nomupay Payment Processing Gateway Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in totalprocessing Nomupay Payment Processing Gateway allows Path Traversal. This issue affects Nomupay Payment Processing Gateway: from n/a through 7.1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/totalprocessing-card-payments/vulnerability/
ulnrichment: References: - https://patchstack.com/database/wordpress/plugin/totalprocessing-card-payments/vulnerability/wordpress-nomupay-payment-processing-gateway-7-1-7-arbitrary-file-download-vulnerability?_s_id=cve
CVE ID: CVE-2025-46487 State: PUBLISHED Published: 2025-05-23T12:43:41.701Z Last Updated: 2025-05-23T14:51:11.634Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: sftranna Products: EC Authorize.net Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sftranna EC Authorize.net allows Reflected XSS. This issue affects EC Authorize.net: from n/a through 0.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ec-authorizenet/vulnerability/wordpress-ec-authorize-net-plugin-0-3-3-reflected-cross-site-scripting-xss-vuln
ess/plugin/ec-authorizenet/vulnerability/wordpress-ec-authorize-net-plugin-0-3-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46488 State: PUBLISHED Published: 2025-05-23T12:43:41.239Z Last Updated: 2025-05-23T14:51:26.623Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: dastan800 Products: Visual Builder Problem Types: CWE-862 Description: Missing Authorization vulnerability in dastan800 Visual Builder allows Reflected XSS. This issue affects Visual Builder: from n/a through 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/visual-builder/vulnerability/wordpress-visual-builder-plugin-1-2-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-46489 State: PUBLISHED Published: 2025-04-24T16:09:21.826Z Last Updated: 2025-04-24T20:00:07.692Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: vinodvaswani9 Products: Bulk Assign Linked Products For WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in vinodvaswani9 Bulk Assign Linked Products For WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Bulk Assign Linked Products For WooCommerce: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wc-bulk-assign-linked-products/vulner
A ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wc-bulk-assign-linked-products/vulnerability/wordpress-bulk-assign-linked-products-for-woocommerce-2-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-46490 State: PUBLISHED Published: 2025-05-23T12:43:40.781Z Last Updated: 2025-05-23T14:51:43.843Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: wordwebsoftware Products: Crossword Compiler Puzzles Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in wordwebsoftware Crossword Compiler Puzzles allows Upload a Web Shell to a Web Server. This issue affects Crossword Compiler Puzzles: from n/a through 5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/crossword-compiler-puzzles/vulnerability/wordpress-crossword-compiler-puzzles-
/patchstack.com/database/wordpress/plugin/crossword-compiler-puzzles/vulnerability/wordpress-crossword-compiler-puzzles-5-2-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-46491 State: PUBLISHED Published: 2025-04-24T16:09:11.340Z Last Updated: 2025-04-24T20:02:14.801Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Matthew Muro Products: Multi-Column Taxonomy List Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matthew Muro Multi-Column Taxonomy List allows Stored XSS. This issue affects Multi-Column Taxonomy List: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/multi-column-taxonomy-list/vulnerability/wordpress-multi-column-taxonomy-l
ps://patchstack.com/database/wordpress/plugin/multi-column-taxonomy-list/vulnerability/wordpress-multi-column-taxonomy-list-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46492 State: PUBLISHED Published: 2025-04-24T16:08:50.656Z Last Updated: 2025-04-25T13:53:00.751Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Pham Thanh Products: Call Now PHT Blog Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Pham Thanh Call Now PHT Blog allows Stored XSS. This issue affects Call Now PHT Blog: from n/a through 2.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/call-now-coccoc-pht-blog/vulnerability/wordpress-call-now-pht-blog-plugin-2-4-1-csrf-to-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46493 State: PUBLISHED Published: 2025-05-23T12:43:40.330Z Last Updated: 2025-05-23T14:53:11.548Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: wordwebsoftware Products: Crossword Compiler Puzzles Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordwebsoftware Crossword Compiler Puzzles allows Stored XSS. This issue affects Crossword Compiler Puzzles: from n/a through 5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/crossword-compiler-puzzles/vulnerability/wordpress-crossword-compile
- https://patchstack.com/database/wordpress/plugin/crossword-compiler-puzzles/vulnerability/wordpress-crossword-compiler-puzzles-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve