Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-53244 State: PUBLISHED Published: 2025-08-28T12:37:23.679Z Last Updated: 2025-08-28T14:19:31.993Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Unfoldwp Products: Magazine Elite Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unfoldwp Magazine Elite allows PHP Local File Inclusion. This issue affects Magazine Elite: from n/a through 1.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/magazine-elite/vulnerability/wordpress-magazine-elite-theme-1-2-4-local-file-inclusion
tack.com/database/wordpress/theme/magazine-elite/vulnerability/wordpress-magazine-elite-theme-1-2-4-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53245 State: PUBLISHED Published: 2025-11-06T15:53:59.391Z Last Updated: 2025-11-13T10:33:42.349Z Vendors: Afzal Multani Products: WP Logo Changer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Afzal Multani WP Logo Changer am-login-logo allows Stored XSS.This issue affects WP Logo Changer: from n/a through <= 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/am-login-logo/vulnerability/wordpress-wp-logo-changer-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53246 State: PUBLISHED Published: 2025-11-06T15:53:59.915Z Last Updated: 2025-11-13T10:33:42.341Z Vendors: Gaurav Aggarwal Products: Backup and Move Problem Types: CWE-862 Description: Missing Authorization vulnerability in Gaurav Aggarwal Backup and Move backup-and-move allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backup and Move: from n/a through <= 0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/backup-and-move/vulnerability/wordpress-backup-and-move-plugin-0-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53247 State: PUBLISHED Published: 2025-08-28T12:37:24.304Z Last Updated: 2025-08-28T14:51:13.398Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: WPInterface Products: BlogMarks Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPInterface BlogMarks allows PHP Local File Inclusion. This issue affects BlogMarks: from n/a through 1.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/blogmarks/vulnerability/wordpress-blogmarks-theme-1-0-8-local-file-inclusion-vulnerability?_s_i
database/wordpress/theme/blogmarks/vulnerability/wordpress-blogmarks-theme-1-0-8-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53248 State: PUBLISHED Published: 2025-08-28T12:37:24.887Z Last Updated: 2025-08-28T14:48:19.433Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Unfoldwp Products: Magazine Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unfoldwp Magazine allows PHP Local File Inclusion. This issue affects Magazine: from n/a through 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/eximious-magazine/vulnerability/wordpress-magazine-theme-1-2-2-local-file-inclusion-vulnerability?_s_id=
wordpress/theme/eximious-magazine/vulnerability/wordpress-magazine-theme-1-2-2-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53249 State: PUBLISHED Published: 2025-08-14T18:22:00.287Z Last Updated: 2025-08-14T20:06:20.213Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: hakeemnala Products: Build App Online Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in hakeemnala Build App Online allows Cross Site Request Forgery. This issue affects Build App Online: from n/a through 1.0.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/build-app-online/vulnerability/wordpress-build-app-online-plugin-plugin-1-0-23-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53250 State: PUBLISHED Published: 2025-08-28T12:37:25.910Z Last Updated: 2025-08-28T14:47:15.131Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Chartbeat Products: Chartbeat Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Chartbeat Chartbeat allows Server Side Request Forgery. This issue affects Chartbeat: from n/a through 2.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/chartbeat/vulnerability/wordpress-chartbeat-plugin-2-0-7-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53251 State: PUBLISHED Published: 2025-08-21T14:43:32.778Z Last Updated: 2025-08-22T09:34:24.623Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: An-Themes Products: Pin WP Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in An-Themes Pin WP allows Upload a Web Shell to a Web Server.This issue affects Pin WP: from n/a before 7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/pin-wp/vulnerability/wordpress-responsive-menu-plugin-6-1-4-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-53252 State: PUBLISHED Published: 2025-11-06T15:54:02.680Z Last Updated: 2025-11-13T10:33:42.412Z Vendors: zozothemes Products: Zegen Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Zegen zegen allows PHP Local File Inclusion.This issue affects Zegen: from n/a through <= 1.1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/zegen/vulnerability/wordpress-zegen-theme-1-1-9-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53253 State: PUBLISHED Published: 2025-06-27T13:21:03.246Z Last Updated: 2025-06-27T14:46:03.384Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Josh Products: WP Edit Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh WP Edit allows Stored XSS. This issue affects WP Edit: from n/a through 4.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-edit/vulnerability/wordpress-wp-edit-plugin-4-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53254 State: PUBLISHED Published: 2025-06-27T13:21:03.851Z Last Updated: 2025-06-27T14:45:55.443Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: webcraftic Products: Cyrlitera Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in webcraftic Cyrlitera allows Cross Site Request Forgery. This issue affects Cyrlitera: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cyrlitera/vulnerability/wordpress-cyrlitera-plugin-1-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53255 State: PUBLISHED Published: 2025-06-27T13:21:04.473Z Last Updated: 2025-06-27T14:45:39.916Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Nabil Lemsieh Products: HurryTimer Problem Types: CWE-862 Description: Missing Authorization vulnerability in Nabil Lemsieh HurryTimer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects HurryTimer: from n/a through 2.13.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hurrytimer/vulnerability/wordpress-hurrytimer-plugin-2-13-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53256 State: PUBLISHED Published: 2025-06-27T13:21:05.082Z Last Updated: 2025-07-02T20:38:21.898Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: YayCommerce Products: YaySMTP Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce YaySMTP allows SQL Injection.This issue affects YaySMTP: from n/a through 2.6.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/yaysmtp/vulnerability/wordpress-yaysmtp-plugin-6-8-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-53257 State: PUBLISHED Published: 2025-06-27T13:21:05.659Z Last Updated: 2025-06-27T14:45:15.780Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Serhii Pasyuk Products: Gmedia Photo Gallery Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Serhii Pasyuk Gmedia Photo Gallery allows PHP Local File Inclusion. This issue affects Gmedia Photo Gallery: from n/a through 1.23.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/grand-media/vulnerability/wordpress-gmedia-photo-gallery
References: - https://patchstack.com/database/wordpress/plugin/grand-media/vulnerability/wordpress-gmedia-photo-gallery-plugin-1-23-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53258 State: PUBLISHED Published: 2025-06-27T13:21:06.300Z Last Updated: 2025-07-08T13:35:16.310Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: Wow-Company Products: Hover Effects Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wow-Company Hover Effects hover-effects allows SQL Injection.This issue affects Hover Effects: from n/a through 2.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hover-effects/vulnerability/wordpress-hover-effects-plugin-2-1-2-sql-injection-vulnerability?_s_id=
ase/wordpress/plugin/hover-effects/vulnerability/wordpress-hover-effects-plugin-2-1-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-53259 State: PUBLISHED Published: 2025-06-27T13:21:06.917Z Last Updated: 2025-06-27T13:56:10.625Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: nicdark Products: Hotel Booking Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nicdark Hotel Booking allows PHP Local File Inclusion. This issue affects Hotel Booking: from n/a through 3.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/nd-booking/vulnerability/wordpress-hotel-booking-plugin-3-7-local-file-inclusion-vulnerabili
m/database/wordpress/plugin/nd-booking/vulnerability/wordpress-hotel-booking-plugin-3-7-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53260 State: PUBLISHED Published: 2025-06-27T13:21:07.549Z Last Updated: 2025-06-27T13:55:34.466Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: getredhawkstudio Products: File Manager Plugin For Wordpress Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in getredhawkstudio File Manager Plugin For Wordpress allows Upload a Web Shell to a Web Server. This issue affects File Manager Plugin For Wordpress: from n/a through 7.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/file-manager-plugin-for-wordpress/vulnerability/wordpre
: References: - https://patchstack.com/database/wordpress/plugin/file-manager-plugin-for-wordpress/vulnerability/wordpress-file-manager-plugin-for-wordpress-plugin-7-5-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-53261 State: PUBLISHED Published: 2025-06-27T13:21:08.188Z Last Updated: 2025-06-27T13:55:52.636Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: macbookandrew Products: WP YouTube Live Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in macbookandrew WP YouTube Live allows Cross Site Request Forgery. This issue affects WP YouTube Live: from n/a through 1.10.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-youtube-live/vulnerability/wordpress-wp-youtube-live-plugin-1-10-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53262 State: PUBLISHED Published: 2025-06-27T13:21:08.812Z Last Updated: 2025-06-27T13:55:15.479Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Writesonic Products: Writesonic Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Writesonic Writesonic allows Cross Site Request Forgery. This issue affects Writesonic: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/writesonic/vulnerability/wordpress-writesonic-plugin-1-0-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53263 State: PUBLISHED Published: 2025-06-27T13:21:09.438Z Last Updated: 2025-06-27T13:52:55.387Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: PluginsCafe Products: Address Autocomplete via Google for Gravity Forms Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in PluginsCafe Address Autocomplete via Google for Gravity Forms allows Cross Site Request Forgery. This issue affects Address Autocomplete via Google for Gravity Forms: from n/a through 1.3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gf-google-address-autocomplete/vulnerab
ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gf-google-address-autocomplete/vulnerability/wordpress-address-autocomplete-via-google-for-gravity-forms-plugin-1-3-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53264 State: PUBLISHED Published: 2025-06-27T13:21:10.061Z Last Updated: 2025-06-27T13:52:19.397Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Konrád Koller Products: ONet Regenerate Thumbnails Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Konrád Koller ONet Regenerate Thumbnails allows Cross Site Request Forgery. This issue affects ONet Regenerate Thumbnails: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/onet-regenerate-thumbnails/vulnerability/wordpress-onet-regenerate-thumbnails-plugin-1-5-cross-site-reques
dpress/plugin/onet-regenerate-thumbnails/vulnerability/wordpress-onet-regenerate-thumbnails-plugin-1-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53265 State: PUBLISHED Published: 2025-06-27T13:21:10.655Z Last Updated: 2025-06-27T13:52:00.779Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Elena Yamshikova Products: Virusdie Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Elena Yamshikova Virusdie allows Cross Site Request Forgery. This issue affects Virusdie: from n/a through 1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/virusdie/vulnerability/wordpress-virusdie-plugin-1-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53266 State: PUBLISHED Published: 2025-06-27T13:21:11.276Z Last Updated: 2025-06-27T13:51:42.938Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: EdwardBock Products: Cron Logger Problem Types: CWE-862 Description: Missing Authorization vulnerability in EdwardBock Cron Logger allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Cron Logger: from n/a through 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cron-logger/vulnerability/wordpress-cron-logger-plugin-1-3-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53267 State: PUBLISHED Published: 2025-06-27T13:21:11.852Z Last Updated: 2025-06-27T13:51:25.052Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Aftab Husain Products: Hide Admin Bar From Front End Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Aftab Husain Hide Admin Bar From Front End allows Cross Site Request Forgery. This issue affects Hide Admin Bar From Front End: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hide-admin-bar-from-front-end/vulnerability/wordpress-hide-admin-bar-from-front-end-plugin-1-0-0-
abase/wordpress/plugin/hide-admin-bar-from-front-end/vulnerability/wordpress-hide-admin-bar-from-front-end-plugin-1-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53268 State: PUBLISHED Published: 2025-06-27T13:21:12.448Z Last Updated: 2025-06-27T13:51:05.943Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: ryanpcmcquen Products: Import external attachments Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ryanpcmcquen Import external attachments allows Cross Site Request Forgery. This issue affects Import external attachments: from n/a through 1.5.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/import-external-attachments/vulnerability/wordpress-import-external-attachments-plugin-1-5-12-cross-si
/wordpress/plugin/import-external-attachments/vulnerability/wordpress-import-external-attachments-plugin-1-5-12-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53269 State: PUBLISHED Published: 2025-06-27T13:21:13.051Z Last Updated: 2025-06-27T14:44:48.818Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: imw3 Products: My Wp Brand Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in imw3 My Wp Brand allows Cross Site Request Forgery. This issue affects My Wp Brand: from n/a through 1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/my-wp-brand/vulnerability/wordpress-my-wp-brand-plugin-1-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53270 State: PUBLISHED Published: 2025-06-27T13:21:13.717Z Last Updated: 2025-06-27T14:44:42.202Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Blend Media Products: WordPress CTA Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Blend Media WordPress CTA allows Cross Site Request Forgery. This issue affects WordPress CTA: from n/a through 1.6.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-sticky-sidebar/vulnerability/wordpress-cta-plugin-1-6-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53271 State: PUBLISHED Published: 2025-06-27T13:21:14.348Z Last Updated: 2025-06-27T14:44:27.954Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Anton Bond Products: Additional Order Filters for WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Anton Bond Additional Order Filters for WooCommerce allows Stored XSS. This issue affects Additional Order Filters for WooCommerce: from n/a through 1.22. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/additional-order-filters-for-woocommerce/vulnerability/wordpress-additional-order-filte
ck.com/database/wordpress/plugin/additional-order-filters-for-woocommerce/vulnerability/wordpress-additional-order-filters-for-woocommerce-plugin-1-22-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53272 State: PUBLISHED Published: 2025-06-27T13:21:14.996Z Last Updated: 2025-06-27T14:44:11.678Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: opicron Products: Image Cleanup Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in opicron Image Cleanup allows Cross Site Request Forgery. This issue affects Image Cleanup: from n/a through 1.9.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/image-cleanup/vulnerability/wordpress-image-cleanup-plugin-1-9-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53273 State: PUBLISHED Published: 2025-06-27T13:21:15.669Z Last Updated: 2025-06-27T14:44:04.242Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Slickstream Products: Slickstream Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Slickstream Slickstream allows Cross Site Request Forgery. This issue affects Slickstream: from n/a through 2.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/slick-engagement/vulnerability/wordpress-slickstream-plugin-2-0-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53274 State: PUBLISHED Published: 2025-06-27T13:21:16.249Z Last Updated: 2025-06-27T14:43:56.691Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Hossin Asaadi Products: WP Permalink Translator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Hossin Asaadi WP Permalink Translator allows Stored XSS. This issue affects WP Permalink Translator: from n/a through 1.7.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-permalink-translator/vulnerability/wordpress-wp-permalink-translator-plugin-1-7-6-cross-site-request-forgery-csrf-vulnerability?
k-translator/vulnerability/wordpress-wp-permalink-translator-plugin-1-7-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53275 State: PUBLISHED Published: 2025-06-27T13:21:16.830Z Last Updated: 2025-06-27T14:43:46.708Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: VaultDweller Products: Leyka Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VaultDweller Leyka allows DOM-Based XSS. This issue affects Leyka: from n/a through 3.31.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/leyka/vulnerability/wordpress-leyka-plugin-3-31-9-cross-site-scripting-xss-vulnerability?_s_id=cve