Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-62900 State: PUBLISHED Published: 2025-10-27T01:33:50.140Z Last Updated: 2025-11-13T10:33:47.605Z Vendors: WeblineIndia Products: Popular Posts by Webline Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WeblineIndia Popular Posts by Webline popular-posts-by-webline allows Stored XSS.This issue affects Popular Posts by Webline: from n/a through <= 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/popular-posts-by-webline/vulnerability/wordpress-popular-posts-by-webline-plugin-1-1-1-cross-site-scripting-xss-vulnerab
popular-posts-by-webline/vulnerability/wordpress-popular-posts-by-webline-plugin-1-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62902 State: PUBLISHED Published: 2025-10-27T01:33:50.531Z Last Updated: 2025-11-13T10:33:47.599Z Vendors: ThemeHunk Products: WP Popup Builder Problem Types: CWE-497 Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeHunk WP Popup Builder wp-popup-builder allows Retrieve Embedded Sensitive Data.This issue affects WP Popup Builder: from n/a through <= 1.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-popup-builder/vulnerability/wordpress-wp-popup-builder-plugin-1-3-6-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-62903 State: PUBLISHED Published: 2025-10-27T01:33:50.952Z Last Updated: 2025-11-13T10:33:47.607Z Vendors: WPClever Products: WPC Smart Messages for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPClever WPC Smart Messages for WooCommerce wpc-smart-messages allows Stored XSS.This issue affects WPC Smart Messages for WooCommerce: from n/a through <= 4.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wpc-smart-messages/vulnerability/wordpress-wpc-smart-messages-for-woocommerce-plugin-4-2-4-cross-site-sc
ordpress/Plugin/wpc-smart-messages/vulnerability/wordpress-wpc-smart-messages-for-woocommerce-plugin-4-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62904 State: PUBLISHED Published: 2025-10-27T01:33:51.339Z Last Updated: 2025-11-13T10:33:47.648Z Vendors: Ben Huson Products: WP Geo Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ben Huson WP Geo wp-geo allows Stored XSS.This issue affects WP Geo: from n/a through <= 3.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-geo/vulnerability/wordpress-wp-geo-plugin-3-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62905 State: PUBLISHED Published: 2025-10-27T01:33:51.717Z Last Updated: 2025-11-13T10:33:47.633Z Vendors: Justin Tadlock Products: Query Posts Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Tadlock Query Posts query-posts allows Stored XSS.This issue affects Query Posts: from n/a through <= 0.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/query-posts/vulnerability/wordpress-query-posts-plugin-0-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62906 State: PUBLISHED Published: 2025-10-27T01:33:52.110Z Last Updated: 2025-11-13T10:33:47.637Z Vendors: epiphanyit321 Products: Referral Link Tracker Problem Types: CWE-862 Description: Missing Authorization vulnerability in epiphanyit321 Referral Link Tracker referral-link-tracker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Referral Link Tracker: from n/a through <= 1.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/referral-link-tracker/vulnerability/wordpress-referral-link-tracker-plugin-1-1-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62907 State: PUBLISHED Published: 2025-10-27T01:33:52.564Z Last Updated: 2025-11-13T10:33:47.661Z Vendors: aviplugins.com Products: Custom Post Type Attachment Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aviplugins.com Custom Post Type Attachment custom-post-type-pdf-attachment allows Stored XSS.This issue affects Custom Post Type Attachment: from n/a through <= 3.4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/custom-post-type-pdf-attachment/vulnerability/wordpress-custom-post-type-attachment-plugin-3-4-6-cro
se/Wordpress/Plugin/custom-post-type-pdf-attachment/vulnerability/wordpress-custom-post-type-attachment-plugin-3-4-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62908 State: REJECTED Published: 2025-10-27T01:33:52.965Z Last Updated: 2025-11-21T08:16:56.965Z Description: No description available.
CVE ID: CVE-2025-62909 State: PUBLISHED Published: 2025-10-27T01:33:53.355Z Last Updated: 2025-11-13T10:33:47.658Z Vendors: mrityunjay Products: Smart WeTransfer Problem Types: CWE-862 Description: Missing Authorization vulnerability in mrityunjay Smart WeTransfer smart-wetransfer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart WeTransfer: from n/a through <= 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/smart-wetransfer/vulnerability/wordpress-smart-wetransfer-plugin-1-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62910 State: PUBLISHED Published: 2025-10-27T01:33:53.748Z Last Updated: 2025-11-13T10:33:47.648Z Vendors: deshine Products: Video Gallery by Huzzaz Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in deshine Video Gallery by Huzzaz huzzaz-video-gallery allows Stored XSS.This issue affects Video Gallery by Huzzaz: from n/a through <= 10.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/huzzaz-video-gallery/vulnerability/wordpress-video-gallery-by-huzzaz-plugin-10-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62911 State: PUBLISHED Published: 2025-10-27T01:33:54.127Z Last Updated: 2025-11-13T10:33:47.676Z Vendors: Rock Content Products: Rock Convert Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rock Content Rock Convert rock-convert allows Stored XSS.This issue affects Rock Convert: from n/a through <= 3.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/rock-convert/vulnerability/wordpress-rock-convert-plugin-3-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62912 State: PUBLISHED Published: 2025-10-27T01:33:54.526Z Last Updated: 2025-11-13T10:33:47.671Z Vendors: SiteGround Products: SiteGround Email Marketing Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SiteGround SiteGround Email Marketing siteground-email-marketing allows Stored XSS.This issue affects SiteGround Email Marketing: from n/a through <= 1.7.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/siteground-email-marketing/vulnerability/wordpress-siteground-email-marketing-plugin-1-7-1-cross-site-scripting-xss-
gin/siteground-email-marketing/vulnerability/wordpress-siteground-email-marketing-plugin-1-7-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62913 State: PUBLISHED Published: 2025-10-27T01:33:54.900Z Last Updated: 2025-11-13T10:33:47.693Z Vendors: wpopal Products: Opal Service Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpopal Opal Service opal-service allows Stored XSS.This issue affects Opal Service: from n/a through <= 1.9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/opal-service/vulnerability/wordpress-opal-service-plugin-1-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62914 State: PUBLISHED Published: 2025-11-06T15:56:02.281Z Last Updated: 2025-11-13T10:33:47.717Z Vendors: anibalwainstein Products: Effect Maker Problem Types: CWE-862 Description: Missing Authorization vulnerability in anibalwainstein Effect Maker effect-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Effect Maker: from n/a through <= 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/effect-maker/vulnerability/wordpress-effect-maker-plugin-1-2-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62915 State: PUBLISHED Published: 2025-10-27T01:33:55.284Z Last Updated: 2025-11-13T10:33:47.735Z Vendors: clicksend Products: SMS Contact Form 7 Notifications by ClickSend Problem Types: CWE-862 Description: Missing Authorization vulnerability in clicksend SMS Contact Form 7 Notifications by ClickSend clicksend-contactform7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMS Contact Form 7 Notifications by ClickSend: from n/a through <= 1.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/clicksend-contactform7/vulnerability/wordpress-sms-contact-form-7-notific
//vdp.patchstack.com/database/Wordpress/Plugin/clicksend-contactform7/vulnerability/wordpress-sms-contact-form-7-notifications-by-clicksend-plugin-1-4-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62916 State: PUBLISHED Published: 2025-10-27T01:33:55.688Z Last Updated: 2025-11-13T10:33:47.727Z Vendors: adivaha® Products: Flights &amp; Hotels Booking WP Plugin Problem Types: CWE-862 Description: Missing Authorization vulnerability in adivaha® Flights &amp; Hotels Booking WP Plugin adiaha-hotel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flights &amp; Hotels Booking WP Plugin: from n/a through <= 3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/adiaha-hotel/vulnerability/wordpress-flights-hotels-booking-wp-plugin-plugin-3-1-broken-access-control-vulne
ress/Plugin/adiaha-hotel/vulnerability/wordpress-flights-hotels-booking-wp-plugin-plugin-3-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62917 State: PUBLISHED Published: 2025-10-27T01:33:56.091Z Last Updated: 2025-11-13T10:33:47.768Z Vendors: Jamel.Z Products: Tooltipy Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jamel.Z Tooltipy bluet-keywords-tooltip-generator allows Stored XSS.This issue affects Tooltipy: from n/a through <= 5.5.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/bluet-keywords-tooltip-generator/vulnerability/wordpress-tooltipy-plugin-5-5-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62918 State: PUBLISHED Published: 2025-10-27T01:33:56.477Z Last Updated: 2025-11-13T10:33:47.771Z Vendors: ignitionwp Products: IgnitionDeck Problem Types: CWE-862 Description: Missing Authorization vulnerability in ignitionwp IgnitionDeck ignitiondeck allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IgnitionDeck: from n/a through <= 2.0.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/ignitiondeck/vulnerability/wordpress-ignitiondeck-plugin-2-0-10-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62919 State: PUBLISHED Published: 2025-10-27T01:33:56.876Z Last Updated: 2025-11-13T10:33:47.770Z Vendors: themeshopy Products: TS Demo Importer Problem Types: CWE-862 Description: Missing Authorization vulnerability in themeshopy TS Demo Importer ts-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TS Demo Importer: from n/a through <= 0.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/ts-demo-importer/vulnerability/wordpress-ts-demo-importer-plugin-0-1-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62920 State: PUBLISHED Published: 2025-10-27T01:33:57.278Z Last Updated: 2025-11-13T10:33:47.770Z Vendors: webnique Products: USERCENTRICS CMP Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webnique USERCENTRICS CMP usercentrics-consent-management-platform allows Stored XSS.This issue affects USERCENTRICS CMP: from n/a through <= 1.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/usercentrics-consent-management-platform/vulnerability/wordpress-usercentrics-cmp-plugin-1-0-9-cross-site-scripting-xss-vulnerability?_s
sent-management-platform/vulnerability/wordpress-usercentrics-cmp-plugin-1-0-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62921 State: PUBLISHED Published: 2025-10-27T01:33:57.675Z Last Updated: 2025-11-13T10:33:47.774Z Vendors: Pagup Products: Bulk Auto Image Title Attribute Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pagup Bulk Auto Image Title Attribute bulk-image-title-attribute allows DOM-Based XSS.This issue affects Bulk Auto Image Title Attribute: from n/a through <= 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/bulk-image-title-attribute/vulnerability/wordpress-bulk-auto-image-title-attribute-plugin-2-0-1-cross-site-s
ress/Plugin/bulk-image-title-attribute/vulnerability/wordpress-bulk-auto-image-title-attribute-plugin-2-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62922 State: PUBLISHED Published: 2025-10-27T01:33:58.086Z Last Updated: 2025-11-13T10:33:47.816Z Vendors: Shambhu Patnaik Products: Export Categories Problem Types: CWE-862 Description: Missing Authorization vulnerability in Shambhu Patnaik Export Categories export-categories allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Export Categories: from n/a through <= 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/export-categories/vulnerability/wordpress-export-categories-plugin-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62923 State: PUBLISHED Published: 2025-10-27T01:33:58.486Z Last Updated: 2025-11-13T10:33:47.796Z Vendors: Debuggers Studio Products: Marquee Addons for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Debuggers Studio Marquee Addons for Elementor marquee-addons-for-elementor allows DOM-Based XSS.This issue affects Marquee Addons for Elementor: from n/a through <= 3.7.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/marquee-addons-for-elementor/vulnerability/wordpress-marquee-addons-for-elementor-plugin-3-7
m/database/Wordpress/Plugin/marquee-addons-for-elementor/vulnerability/wordpress-marquee-addons-for-elementor-plugin-3-7-12-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62924 State: PUBLISHED Published: 2025-10-27T01:33:58.866Z Last Updated: 2025-11-13T10:33:47.811Z Vendors: PickPlugins Products: Post Grid and Gutenberg Blocks Problem Types: CWE-862 Description: Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through <= 2.3.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/post-grid/vulnerability/wordpress-post-grid-and-gutenberg-blocks-plugin-2-3-17-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62925 State: PUBLISHED Published: 2025-10-27T01:33:59.236Z Last Updated: 2025-11-13T10:33:47.839Z Vendors: Conversios Products: Conversios.io Problem Types: CWE-862 Description: Missing Authorization vulnerability in Conversios Conversios.io enhanced-e-commerce-for-woocommerce-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Conversios.io: from n/a through <= 7.2.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/enhanced-e-commerce-for-woocommerce-store/vulnerability/wordpress-conversios-io-plugin-7-2-10-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62927 State: PUBLISHED Published: 2025-10-27T01:33:59.620Z Last Updated: 2025-11-13T10:33:47.829Z Vendors: Nelio Software Products: Nelio Content Problem Types: CWE-862 Description: Missing Authorization vulnerability in Nelio Software Nelio Content nelio-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio Content: from n/a through <= 4.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/nelio-content/vulnerability/wordpress-nelio-content-plugin-4-0-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62928 State: PUBLISHED Published: 2025-10-27T01:34:00.000Z Last Updated: 2025-11-13T10:33:47.860Z Vendors: Joby Joseph Products: SEO Meta Description Updater Problem Types: CWE-862 Description: Missing Authorization vulnerability in Joby Joseph SEO Meta Description Updater seo-meta-description-updater allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEO Meta Description Updater: from n/a through <= 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/seo-meta-description-updater/vulnerability/wordpress-seo-meta-description-updater-plugin-1-2-0-broken-access-contr
lugin/seo-meta-description-updater/vulnerability/wordpress-seo-meta-description-updater-plugin-1-2-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62929 State: PUBLISHED Published: 2025-10-27T01:34:00.648Z Last Updated: 2025-11-13T10:33:47.853Z Vendors: PickPlugins Products: Testimonial Slider Problem Types: CWE-862 Description: Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Testimonial Slider: from n/a through <= 2.0.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/testimonial/vulnerability/wordpress-testimonial-slider-plugin-2-0-15-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62930 State: PUBLISHED Published: 2025-10-27T01:34:01.039Z Last Updated: 2025-11-13T10:33:47.888Z Vendors: RomanCode Products: MapSVG Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through <= 8.7.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/mapsvg-lite-interactive-vector-maps/vulnerability/wordpress-mapsvg-plugin-8-7-15-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-62931 State: PUBLISHED Published: 2025-10-27T01:34:01.473Z Last Updated: 2025-11-13T10:33:47.917Z Vendors: microsoftstart Products: MSN Partner Hub Problem Types: CWE-862 Description: Missing Authorization vulnerability in microsoftstart MSN Partner Hub microsoft-start allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MSN Partner Hub: from n/a through <= 2.8.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/microsoft-start/vulnerability/wordpress-msn-partner-hub-plugin-2-8-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62932 State: PUBLISHED Published: 2025-10-27T01:34:02.004Z Last Updated: 2025-11-13T10:33:47.905Z Vendors: wprio Products: Table Block by RioVizual Problem Types: CWE-862 Description: Missing Authorization vulnerability in wprio Table Block by RioVizual riovizual allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Table Block by RioVizual: from n/a through <= 2.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/riovizual/vulnerability/wordpress-table-block-by-riovizual-plugin-2-3-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62933 State: PUBLISHED Published: 2025-10-27T01:34:02.471Z Last Updated: 2025-11-13T10:33:47.896Z Vendors: Prakash Products: Awesome Testimonials Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Prakash Awesome Testimonials awesome-testimonials allows Stored XSS.This issue affects Awesome Testimonials: from n/a through <= 2.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/awesome-testimonials/vulnerability/wordpress-awesome-testimonials-plugin-2-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-62934 State: PUBLISHED Published: 2025-10-27T01:34:02.856Z Last Updated: 2025-11-13T10:33:47.932Z Vendors: Mejar Products: WP Business Hours Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mejar WP Business Hours wp-business-hours allows Stored XSS.This issue affects WP Business Hours: from n/a through <= 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-business-hours/vulnerability/wordpress-wp-business-hours-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-62935 State: PUBLISHED Published: 2025-10-27T01:34:03.234Z Last Updated: 2025-11-13T10:33:47.938Z Vendors: ilmosys Products: Open Close WooCommerce Store Problem Types: CWE-862 Description: Missing Authorization vulnerability in ilmosys Open Close WooCommerce Store woc-open-close allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Open Close WooCommerce Store: from n/a through <= 4.9.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/woc-open-close/vulnerability/wordpress-open-close-woocommerce-store-plugin-4-9-8-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-62936 State: PUBLISHED Published: 2025-10-27T01:34:03.605Z Last Updated: 2025-11-13T10:33:47.954Z Vendors: Jthemes Products: xSmart Problem Types: CWE-80 Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Jthemes xSmart xsmart allows Code Injection.This issue affects xSmart: from n/a through <= 1.2.9.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/xsmart/vulnerability/wordpress-xsmart-theme-1-2-9-4-content-injection-vulnerability?_s_id=cve