Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-49422 State: PUBLISHED Published: 2025-08-20T08:03:43.024Z Last Updated: 2025-08-20T13:56:31.264Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Aelora Products: iframe Wrapper Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aelora iframe Wrapper allows DOM-Based XSS. This issue affects iframe Wrapper: from n/a through 0.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/iframe-wrapper/vulnerability/wordpress-iframe-wrapper-plugin-0-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49423 State: PUBLISHED Published: 2025-06-27T11:52:09.473Z Last Updated: 2025-06-27T13:15:18.268Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Syed Tahir Ali Jan Products: Bulk YouTube Post Creator Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Tahir Ali Jan Bulk YouTube Post Creator allows Reflected XSS. This issue affects Bulk YouTube Post Creator: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bulk-youtube-post-creator/vulnerability/wordpress-bulk-youtube-p
ces: - https://patchstack.com/database/wordpress/plugin/bulk-youtube-post-creator/vulnerability/wordpress-bulk-youtube-post-creator-plugin-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49424 State: PUBLISHED Published: 2025-08-20T08:03:42.325Z Last Updated: 2025-08-20T13:59:57.305Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: diego.benna Products: Essential Doo Components for Visual Composer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in diego.benna Essential Doo Components for Visual Composer allows DOM-Based XSS. This issue affects Essential Doo Components for Visual Composer: from n/a through 1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/animated-icon-banne
alyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/animated-icon-banner-for-visual-composer/vulnerability/wordpress-essential-doo-components-for-visual-composer-plugin-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49425 State: PUBLISHED Published: 2025-06-06T12:54:51.309Z Last Updated: 2025-06-06T13:44:40.065Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Adrian Hanft Products: Konami Easter Egg Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Adrian Hanft Konami Easter Egg allows Stored XSS. This issue affects Konami Easter Egg: from n/a through v0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/konami-easter-egg/vulnerability/wordpress-konami-easter-egg-v0-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49426 State: PUBLISHED Published: 2025-08-20T08:03:41.692Z Last Updated: 2025-08-20T18:02:19.411Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Dourou Products: Cookie Warning Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Dourou Cookie Warning allows Cross Site Request Forgery. This issue affects Cookie Warning: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cookie-warning/vulnerability/wordpress-cookie-warning-plugin-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49427 State: PUBLISHED Published: 2025-06-06T12:54:50.836Z Last Updated: 2025-06-06T14:25:53.934Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Ryan Burnette Products: Abbie Expander Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryan Burnette Abbie Expander allows Stored XSS. This issue affects Abbie Expander: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/abbie-expander/vulnerability/wordpress-abbie-expander-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=c
dpress/plugin/abbie-expander/vulnerability/wordpress-abbie-expander-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49428 State: PUBLISHED Published: 2025-08-20T08:03:41.172Z Last Updated: 2025-08-20T18:01:42.194Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Dourou Products: Cookie Warning Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dourou Cookie Warning allows Stored XSS. This issue affects Cookie Warning: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cookie-warning/vulnerability/wordpress-cookie-warning-plugin-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49429 State: PUBLISHED Published: 2025-06-06T12:54:50.375Z Last Updated: 2025-06-06T14:26:11.276Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Ryan Burnette Products: Video Embeds Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ryan Burnette Video Embeds allows Stored XSS. This issue affects Video Embeds: from n/a through 0.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/video-embeds/vulnerability/wordpress-video-embeds-0-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49430 State: PUBLISHED Published: 2025-09-09T16:26:03.584Z Last Updated: 2025-09-09T18:40:23.935Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: FWDesign Products: Ultimate Video Player Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in FWDesign Ultimate Video Player allows Server Side Request Forgery. This issue affects Ultimate Video Player: from n/a through 10.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fwduvp/vulnerability/wordpress-ultimate-video-player-plugin-10-1-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49431 State: PUBLISHED Published: 2025-07-04T11:17:48.158Z Last Updated: 2025-07-07T16:28:09.656Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Gnuget Products: MF Plus WPML Problem Types: CWE-862 Description: Missing Authorization vulnerability in Gnuget MF Plus WPML allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MF Plus WPML: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mf-plus-wpml/vulnerability/wordpress-mf-plus-wpml-1-1-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-49432 State: PUBLISHED Published: 2025-08-15T15:13:13.782Z Last Updated: 2025-08-15T19:11:39.065Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: FWDesign Products: Ultimate Video Player Problem Types: CWE-862 Description: Missing Authorization vulnerability in FWDesign Ultimate Video Player allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Ultimate Video Player: from n/a through 10.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fwduvp/vulnerability/wordpress-ultimate-video-player-plugin-plugin-10-1-broken-access-control-vulnerabil
ordpress/plugin/fwduvp/vulnerability/wordpress-ultimate-video-player-plugin-plugin-10-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49433 State: PUBLISHED Published: 2025-08-14T10:34:08.924Z Last Updated: 2025-08-14T16:02:16.023Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: ThanhD Products: Supermalink Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThanhD Supermalink allows DOM-Based XSS. This issue affects Supermalink: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/supermalink/vulnerability/wordpress-supermalink-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49434 State: PUBLISHED Published: 2025-08-20T08:03:40.552Z Last Updated: 2025-08-20T18:00:52.572Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: stijnvanderree Products: Laposta WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stijnvanderree Laposta WooCommerce allows Stored XSS. This issue affects Laposta WooCommerce: from n/a through 1.9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/laposta-woocommerce/vulnerability/wordpress-laposta-woocommerce-plugin-1-9-1-cross-site-s
.com/database/wordpress/plugin/laposta-woocommerce/vulnerability/wordpress-laposta-woocommerce-plugin-1-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49435 State: PUBLISHED Published: 2025-06-06T12:54:49.895Z Last Updated: 2025-06-06T14:26:29.191Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Hasina77 Products: Wp Easy Allopass Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Hasina77 Wp Easy Allopass allows Cross Site Request Forgery. This issue affects Wp Easy Allopass: from n/a through 4.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wordpress-easy-allopass/vulnerability/wordpress-wp-easy-allopass-4-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49436 State: PUBLISHED Published: 2025-08-20T08:03:39.986Z Last Updated: 2025-08-20T17:59:44.969Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: thiudis Products: Custom Menu Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thiudis Custom Menu allows Stored XSS. This issue affects Custom Menu: from n/a through 1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-menu/vulnerability/wordpress-custom-menu-plugin-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49437 State: PUBLISHED Published: 2025-08-14T10:34:08.095Z Last Updated: 2025-08-14T16:01:41.672Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: worstguy Products: WP LOL Rotation Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in worstguy WP LOL Rotation allows Stored XSS. This issue affects WP LOL Rotation: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/league-of-legends-rotation/vulnerability/wordpress-wp-lol-rotation-1-0-cross-site-scripting-xss-vulnerability?_s_id
ugin/league-of-legends-rotation/vulnerability/wordpress-wp-lol-rotation-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49438 State: PUBLISHED Published: 2025-08-20T08:03:39.479Z Last Updated: 2025-08-20T17:58:05.829Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Max Chirkov Products: Simple Login Log Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Max Chirkov Simple Login Log allows Object Injection. This issue affects Simple Login Log: from n/a through 1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-login-log/vulnerability/wordpress-simple-login-log-plugin-1-1-3-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-49439 State: PUBLISHED Published: 2025-06-06T12:54:49.420Z Last Updated: 2025-06-06T14:26:50.638Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: mariusz88atelierweb Products: Atelier Create CV Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in mariusz88atelierweb Atelier Create CV allows Cross Site Request Forgery. This issue affects Atelier Create CV: from n/a through 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/atelier-create-cv/vulnerability/wordpress-atelier-create-cv-plugin-1-1-2-cross-site-request-forgery-csrf-to-settings-ch
/atelier-create-cv/vulnerability/wordpress-atelier-create-cv-plugin-1-1-2-cross-site-request-forgery-csrf-to-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-49440 State: PUBLISHED Published: 2025-06-06T12:54:48.939Z Last Updated: 2025-06-06T14:27:07.523Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Vuong Nguyen Products: WP Security Master Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Vuong Nguyen WP Security Master allows Cross Site Request Forgery. This issue affects WP Security Master: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-security-master/vulnerability/wordpress-wp-security-master-1-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49441 State: PUBLISHED Published: 2025-06-06T12:54:48.457Z Last Updated: 2025-06-06T13:39:43.325Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: WP Map Plugins Products: Interactive Regional Map of Florida Problem Types: CWE-862 Description: Missing Authorization vulnerability in WP Map Plugins Interactive Regional Map of Florida allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Interactive Regional Map of Florida: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/interactive-map-of-florida/vulnerability/wordpress-
ment: References: - https://patchstack.com/database/wordpress/plugin/interactive-map-of-florida/vulnerability/wordpress-interactive-regional-map-of-florida-1-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49442 State: PUBLISHED Published: 2025-06-06T12:54:47.896Z Last Updated: 2025-06-06T16:22:43.793Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Mostafa Shahiri Products: Simple Nested Menu Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mostafa Shahiri Simple Nested Menu allows Stored XSS. This issue affects Simple Nested Menu: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-nested-menu/vulnerability/wordpress-simple-nested-menu-1-0-cross-site-scripting-xss-v
m/database/wordpress/plugin/simple-nested-menu/vulnerability/wordpress-simple-nested-menu-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49443 State: PUBLISHED Published: 2025-06-06T12:54:47.442Z Last Updated: 2025-06-06T16:22:50.448Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Chris McCoy Products: Bacon Ipsum Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris McCoy Bacon Ipsum allows Stored XSS. This issue affects Bacon Ipsum: from n/a through 2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bacon-ipsum/vulnerability/wordpress-bacon-ipsum-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49444 State: PUBLISHED Published: 2025-06-17T15:01:11.240Z Last Updated: 2025-06-26T17:50:37.552Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: merkulove Products: Reformer for Elementor Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in merkulove Reformer for Elementor allows Upload a Web Shell to a Web Server. This issue affects Reformer for Elementor: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/reformer-elementor/vulnerability/wordpress-reformer-for-elementor-1-0-5-arbitrary-file-upload-vulnera
e/wordpress/plugin/reformer-elementor/vulnerability/wordpress-reformer-for-elementor-1-0-5-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-49445 State: PUBLISHED Published: 2025-06-06T12:54:46.955Z Last Updated: 2025-06-06T16:22:56.500Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WP Map Plugins Products: Interactive UK Regional Map Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Map Plugins Interactive UK Regional Map allows Cross Site Request Forgery. This issue affects Interactive UK Regional Map: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/interactive-uk-regional-map/vulnerability/wordpress-interactive-uk-regional-map-plugin-2-0-cross-site
e/wordpress/plugin/interactive-uk-regional-map/vulnerability/wordpress-interactive-uk-regional-map-plugin-2-0-cross-site-request-forgery-csrf-to-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-49446 State: PUBLISHED Published: 2025-06-06T12:54:46.484Z Last Updated: 2025-06-06T16:23:02.572Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: minhlaobao Products: Admin Notes Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in minhlaobao Admin Notes allows Cross Site Request Forgery. This issue affects Admin Notes: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/admin-note/vulnerability/wordpress-admin-notes-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49447 State: PUBLISHED Published: 2025-06-17T15:01:10.770Z Last Updated: 2025-06-17T15:49:23.982Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Fastw3b LLC Products: FW Food Menu Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Fastw3b LLC FW Food Menu allows Using Malicious Files. This issue affects FW Food Menu : from n/a through 6.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fw-food-menu/vulnerability/wordpress-fw-food-menu-6-0-0-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-49448 State: PUBLISHED Published: 2025-06-27T11:52:08.831Z Last Updated: 2025-06-27T13:15:41.246Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Fastw3b LLC Products: FW Food Menu Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Fastw3b LLC FW Food Menu allows Path Traversal. This issue affects FW Food Menu : from n/a through 6.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fw-food-menu/vulnerability/wordpress-fw-food-menu-6-0-0-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49449 State: PUBLISHED Published: 2025-06-06T12:54:45.999Z Last Updated: 2025-06-06T14:46:56.435Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WP Map Plugins Products: Interactive Regional Map of Africa Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Map Plugins Interactive Regional Map of Africa allows Cross Site Request Forgery. This issue affects Interactive Regional Map of Africa: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/interactive-map-of-africa/vulnerability/wordpress-interactive-regional-map-of-af
atchstack.com/database/wordpress/plugin/interactive-map-of-africa/vulnerability/wordpress-interactive-regional-map-of-africa-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49450 State: PUBLISHED Published: 2025-06-06T12:54:45.510Z Last Updated: 2025-06-06T14:47:47.242Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: mhallmann Products: SEPA Girocode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mhallmann SEPA Girocode allows Stored XSS. This issue affects SEPA Girocode: from n/a through 0.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sepa-girocode/vulnerability/wordpress-sepa-girocode-0-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49451 State: PUBLISHED Published: 2025-06-17T15:01:42.375Z Last Updated: 2025-06-17T17:22:45.373Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: yannisraft Products: Aeroscroll Gallery – Infinite Scroll Image Gallery &amp; Post Grid with Photo Gallery Problem Types: CWE-35 Description: Path Traversal vulnerability in yannisraft Aeroscroll Gallery – Infinite Scroll Image Gallery &amp; Post Grid with Photo Gallery allows Path Traversal. This issue affects Aeroscroll Gallery – Infinite Scroll Image Gallery &amp; Post Grid with Photo Gallery: from n/a through 1.0.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchst
Photo Gallery: from n/a through 1.0.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/aeroscroll-gallery/vulnerability/wordpress-aeroscroll-gallery-infinite-scroll-image-gallery-post-grid-with-photo-gallery-1-0-12-directory-traversal-vulnerability?_s_id=cve
CVE ID: CVE-2025-49452 State: PUBLISHED Published: 2025-06-17T15:01:41.901Z Last Updated: 2025-06-17T17:28:38.181Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Adrian Ladó Products: PostaPanduri Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Ladó PostaPanduri allows SQL Injection. This issue affects PostaPanduri: from n/a through 2.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/postapanduri/vulnerability/wordpress-postapanduri-2-1-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-49453 State: PUBLISHED Published: 2025-06-06T12:54:44.910Z Last Updated: 2025-06-06T14:48:34.781Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Jatinder Pal Singh Products: BP Profile as Homepage Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Jatinder Pal Singh BP Profile as Homepage allows Stored XSS. This issue affects BP Profile as Homepage: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bp-profile-as-homepage/vulnerability/wordpress-bp-profile-as-homepage-plugin-1-1-cross-site-request-forgery-csrf-to-stored-xss