Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-25120 State: PUBLISHED Published: 2025-02-07T10:11:43.437Z Last Updated: 2025-02-12T19:41:06.873Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Melodic Media Products: Slide Banners Problem Types: CWE-862 Description: Missing Authorization vulnerability in Melodic Media Slide Banners allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Slide Banners: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/slide-banners/vulnerability/wordpress-slide-banners-plugin-1-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-25121 State: PUBLISHED Published: 2025-03-03T13:30:24.430Z Last Updated: 2025-03-03T17:36:04.731Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Theme Options Z Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Theme Options Z allows Stored XSS. This issue affects Theme Options Z: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/theme-options-z/vulnerability/wordpress-wp-spell-check-plugin-9-21-cross-site-request-forgery-csrf-vulnerability-2?_s
in/theme-options-z/vulnerability/wordpress-wp-spell-check-plugin-9-21-cross-site-request-forgery-csrf-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-25122 State: PUBLISHED Published: 2025-03-03T13:30:24.588Z Last Updated: 2025-03-03T17:35:58.293Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NotFound Products: WizShop Problem Types: CWE-35 Description: Path Traversal vulnerability in NotFound WizShop allows PHP Local File Inclusion. This issue affects WizShop: from n/a through 3.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wizshop/vulnerability/wordpress-wp-spell-check-plugin-9-21-cross-site-request-forgery-csrf-vulnerability-4?_s_id=cve
CVE ID: CVE-2025-25123 State: PUBLISHED Published: 2025-02-07T10:11:45.930Z Last Updated: 2025-02-12T20:51:41.068Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: xdark Products: Easy Related Posts Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in xdark Easy Related Posts allows Stored XSS. This issue affects Easy Related Posts: from n/a through 2.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-related-posts/vulnerability/wordpress-easy-related-posts-plugin-2-0-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25124 State: PUBLISHED Published: 2025-03-03T13:30:24.772Z Last Updated: 2025-03-03T17:35:52.459Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: devu Products: Status Updater Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devu Status Updater allows Reflected XSS. This issue affects Status Updater: from n/a through 1.9.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fb-status-updater/vulnerability/wordpress-wp-spell-check-plugin-9-21-cross-site-request-forgery-csrf-vulnerability-3?_s_id=
status-updater/vulnerability/wordpress-wp-spell-check-plugin-9-21-cross-site-request-forgery-csrf-vulnerability-3?_s_id=cve
CVE ID: CVE-2025-25125 State: PUBLISHED Published: 2025-02-07T10:11:45.296Z Last Updated: 2025-02-12T20:51:41.282Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: CyrilG Products: Fyrebox Quizzes Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in CyrilG Fyrebox Quizzes allows Stored XSS. This issue affects Fyrebox Quizzes: from n/a through 2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fyrebox-shortcode/vulnerability/wordpress-fyrebox-quizzes-plugin-2-7-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25126 State: PUBLISHED Published: 2025-02-07T10:11:47.787Z Last Updated: 2025-02-12T20:51:40.075Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: zmseo Products: ZMSEO Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in zmseo ZMSEO allows Stored XSS. This issue affects ZMSEO: from n/a through 1.14.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/zmseo/vulnerability/wordpress-zmseo-plugin-1-14-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25127 State: PUBLISHED Published: 2025-03-03T13:30:24.921Z Last Updated: 2025-03-03T17:35:45.916Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Rohitashv Singhal Products: Contact Us By Lord Linus Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rohitashv Singhal Contact Us By Lord Linus allows Reflected XSS. This issue affects Contact Us By Lord Linus: from n/a through 2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/contact-us-by-lord-linus/vulnerability/wordpress-contact-us-by-lord-l
- https://patchstack.com/database/wordpress/plugin/contact-us-by-lord-linus/vulnerability/wordpress-contact-us-by-lord-linus-plugin-2-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25128 State: PUBLISHED Published: 2025-02-07T10:11:46.541Z Last Updated: 2025-02-12T20:51:40.875Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: orlandolac Products: Facilita Form Tracker Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in orlandolac Facilita Form Tracker allows Stored XSS. This issue affects Facilita Form Tracker: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/facilita-form-tracker/vulnerability/wordpress-facilita-form-tracker-plugin-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25129 State: PUBLISHED Published: 2025-03-03T13:30:25.081Z Last Updated: 2025-03-03T17:35:39.294Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Callback Request Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Callback Request allows Reflected XSS. This issue affects Callback Request: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/callback-request/vulnerability/wordpress-callback-request-plugin-1-4-reflected-cross-site-scripting-xss-vulnera
s/plugin/callback-request/vulnerability/wordpress-callback-request-plugin-1-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25130 State: PUBLISHED Published: 2025-03-03T13:30:25.227Z Last Updated: 2025-03-03T17:35:33.233Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NotFound Products: Delete Comments By Status Problem Types: CWE-23 Description: Relative Path Traversal vulnerability in NotFound Delete Comments By Status allows PHP Local File Inclusion. This issue affects Delete Comments By Status: from n/a through 2.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/delete-comments-by-status/vulnerability/wordpress-external-video-for-everybody-plugin-2-1-1-cross-site-scripting-xss-vulnerability-3
nts-by-status/vulnerability/wordpress-external-video-for-everybody-plugin-2-1-1-cross-site-scripting-xss-vulnerability-3?_s_id=cve
CVE ID: CVE-2025-25131 State: PUBLISHED Published: 2025-03-03T13:30:25.437Z Last Updated: 2025-03-03T17:35:26.961Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: RJ Quickcharts Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound RJ Quickcharts allows Stored XSS. This issue affects RJ Quickcharts: from n/a through 0.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rj-quickcharts/vulnerability/wordpress-rj-quickcharts-plugin-0-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25132 State: PUBLISHED Published: 2025-03-03T13:30:25.658Z Last Updated: 2025-03-03T15:01:59.388Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ravi Singh Products: Visitor Details Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ravi Singh Visitor Details allows Stored XSS. This issue affects Visitor Details: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/visitors-details/vulnerability/wordpress-visitor-details-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s
s/plugin/visitors-details/vulnerability/wordpress-visitor-details-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25133 State: PUBLISHED Published: 2025-03-03T13:30:25.824Z Last Updated: 2025-03-03T15:48:49.380Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: WP Frontend Submit Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Frontend Submit allows Cross-Site Scripting (XSS). This issue affects WP Frontend Submit: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-frontend-submit/vulnerability/wordpress-indeed-api-plugin-0-5-csrf-to-settings-change-v
com/database/wordpress/plugin/wp-frontend-submit/vulnerability/wordpress-indeed-api-plugin-0-5-csrf-to-settings-change-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-25134 State: PUBLISHED Published: 2025-03-26T14:24:17.737Z Last Updated: 2025-03-26T15:30:13.643Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Theme Demo Bar Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Theme Demo Bar allows Reflected XSS. This issue affects Theme Demo Bar: from n/a through 1.6.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wordpress-theme-demo-bar/vulnerability/wordpress-theme-demo-bar-plugin-1-6-3-reflected-cross-site-scripting-xss-vul
ugin/wordpress-theme-demo-bar/vulnerability/wordpress-theme-demo-bar-plugin-1-6-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25135 State: PUBLISHED Published: 2025-02-07T10:11:51.518Z Last Updated: 2025-02-12T20:51:37.525Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Victor Barkalov Products: Custom Links On Admin Dashboard Toolbar Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Victor Barkalov Custom Links On Admin Dashboard Toolbar allows Stored XSS. This issue affects Custom Links On Admin Dashboard Toolbar: from n/a through 3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/customize-wpadmin/vulnerability/wordpress-custom-links-on-admin-dashboard-toolbar
tchstack.com/database/wordpress/plugin/customize-wpadmin/vulnerability/wordpress-custom-links-on-admin-dashboard-toolbar-plugin-3-3-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25136 State: PUBLISHED Published: 2025-02-07T10:11:48.439Z Last Updated: 2025-02-12T20:51:34.646Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: shujahat21 Products: Optimate Ads Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shujahat21 Optimate Ads allows Stored XSS. This issue affects Optimate Ads: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/optimate-ads/vulnerability/wordpress-optimate-ads-plugin-1-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25137 State: PUBLISHED Published: 2025-03-03T13:30:25.984Z Last Updated: 2025-03-03T15:34:55.638Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Social Links Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Social Links allows Stored XSS. This issue affects Social Links: from n/a through 1.0.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/social-links/vulnerability/wordpress-facilita-form-tracker-plugin-1-0-csrf-to-stored-xss-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-25138 State: PUBLISHED Published: 2025-02-07T10:11:52.116Z Last Updated: 2025-02-12T20:51:37.324Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Rishi Products: On Page SEO + Whatsapp Chat Button Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Rishi On Page SEO + Whatsapp Chat Button allows Stored XSS. This issue affects On Page SEO + Whatsapp Chat Button: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ops-robots-txt/vulnerability/wordpress-on-page-seo-social-live-chat-formerly-ops-plugin-2-0-0-csrf-to-stored-xss-v
lugin/ops-robots-txt/vulnerability/wordpress-on-page-seo-social-live-chat-formerly-ops-plugin-2-0-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25139 State: PUBLISHED Published: 2025-02-07T10:11:49.639Z Last Updated: 2025-02-12T20:51:38.228Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Cynob IT Consultancy Products: WP Custom Post RSS Feed Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Cynob IT Consultancy WP Custom Post RSS Feed allows Stored XSS. This issue affects WP Custom Post RSS Feed: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-custom-post-rss-feed/vulnerability/wordpress-wp-custom-post-rss-feed-plugin-1-0-0-csrf-to-stored-xss-vulnerability
in/wp-custom-post-rss-feed/vulnerability/wordpress-wp-custom-post-rss-feed-plugin-1-0-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25140 State: PUBLISHED Published: 2025-02-07T10:11:50.264Z Last Updated: 2025-02-12T20:51:38.032Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Scriptonite Products: Simple User Profile Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Scriptonite Simple User Profile allows Stored XSS. This issue affects Simple User Profile: from n/a through 1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-user-profile/vulnerability/wordpress-simple-user-profile-plugin-1-9-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25141 State: PUBLISHED Published: 2025-02-07T10:11:53.900Z Last Updated: 2025-02-12T20:51:39.572Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: zankover Products: Fami Sales Popup Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zankover Fami Sales Popup allows PHP Local File Inclusion. This issue affects Fami Sales Popup: from n/a through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fami-sales-popup/vulnerability/wordpress-fami-sales-popup-plugin-2-0-0-local-fi
patchstack.com/database/wordpress/plugin/fami-sales-popup/vulnerability/wordpress-fami-sales-popup-plugin-2-0-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-25142 State: PUBLISHED Published: 2025-03-03T13:30:26.137Z Last Updated: 2025-03-03T15:33:09.370Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: WP Less Compiler Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Less Compiler allows Stored XSS. This issue affects WP Less Compiler: from n/a through 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-less-compiler/vulnerability/wordpress-wp-less-compiler-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s
/plugin/wp-less-compiler/vulnerability/wordpress-wp-less-compiler-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25143 State: PUBLISHED Published: 2025-02-07T10:11:53.309Z Last Updated: 2025-02-12T20:51:39.866Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: ibasit Products: GlobalQuran Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ibasit GlobalQuran allows Cross Site Request Forgery. This issue affects GlobalQuran: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/globalquran/vulnerability/wordpress-globalquran-plugin-1-0-csrf-to-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-25144 State: PUBLISHED Published: 2025-02-07T10:11:55.111Z Last Updated: 2025-02-12T20:51:39.227Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: theasys Products: Theasys Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in theasys Theasys allows Stored XSS. This issue affects Theasys: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/theasys/vulnerability/wordpress-theasys-plugin-1-0-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25145 State: PUBLISHED Published: 2025-02-07T10:11:49.031Z Last Updated: 2025-02-12T20:51:38.445Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: jordan.hatch Products: Infusionsoft Analytics Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in jordan.hatch Infusionsoft Analytics allows Cross Site Request Forgery. This issue affects Infusionsoft Analytics: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/infusionsoft-web-tracker/vulnerability/wordpress-infusionsoft-analytics-plugin-2-0-cross-site-request-forgery-csrf-vulne
infusionsoft-web-tracker/vulnerability/wordpress-infusionsoft-analytics-plugin-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-25146 State: PUBLISHED Published: 2025-02-07T10:11:47.151Z Last Updated: 2025-02-12T20:51:40.235Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: saleandro Products: Songkick Concerts and Festivals Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in saleandro Songkick Concerts and Festivals allows Cross Site Request Forgery. This issue affects Songkick Concerts and Festivals: from n/a through 0.9.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/songkick-concerts-and-festivals/vulnerability/wordpress-songkick-concerts-and-festivals-plugin-0-
abase/wordpress/plugin/songkick-concerts-and-festivals/vulnerability/wordpress-songkick-concerts-and-festivals-plugin-0-9-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-25147 State: PUBLISHED Published: 2025-02-07T10:11:52.704Z Last Updated: 2025-02-12T20:51:37.023Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Phillip.Gooch Products: Auto SEO Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Phillip.Gooch Auto SEO allows Stored XSS. This issue affects Auto SEO: from n/a through 2.5.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/auto-seo/vulnerability/wordpress-auto-seo-plugin-2-5-6-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25148 State: PUBLISHED Published: 2025-02-07T10:11:50.893Z Last Updated: 2025-02-12T20:51:37.815Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ElbowRobo Products: Read More Copy Link Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ElbowRobo Read More Copy Link allows Stored XSS. This issue affects Read More Copy Link: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/read-more-copy-link/vulnerability/wordpress-read-more-copy-link-plugin-1-0-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25149 State: PUBLISHED Published: 2025-02-07T10:11:54.479Z Last Updated: 2025-02-12T20:51:39.383Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Danillo Nunes Products: Login-box Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Danillo Nunes Login-box allows Stored XSS. This issue affects Login-box: from n/a through 2.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/login-box/vulnerability/wordpress-login-box-plugin-2-0-4-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-25150 State: PUBLISHED Published: 2025-03-03T13:30:26.297Z Last Updated: 2025-03-03T15:32:46.157Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Stylemix Products: uListing Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix uListing allows Blind SQL Injection. This issue affects uListing: from n/a through 2.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ulisting/vulnerability/wordpress-songkick-concerts-and-festivals-plugin-0-9-7-cross-site-request-forgery-csrf-vulnerability
sting/vulnerability/wordpress-songkick-concerts-and-festivals-plugin-0-9-7-cross-site-request-forgery-csrf-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-25151 State: PUBLISHED Published: 2025-02-07T10:11:55.739Z Last Updated: 2025-02-12T20:51:38.996Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: StylemixThemes Products: uListing Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes uListing allows SQL Injection. This issue affects uListing: from n/a through 2.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ulisting/vulnerability/wordpress-ulisting-plugin-2-1-6-sql-injection-vulnerability?_s_id=cve