Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-32541 State: PUBLISHED Published: 2025-04-11T08:42:55.297Z Last Updated: 2025-04-11T14:21:05.832Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: infosoftplugin Products: WooCommerce Sales MIS Report Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in infosoftplugin WooCommerce Sales MIS Report allows Reflected XSS. This issue affects WooCommerce Sales MIS Report: from n/a through 4.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-mis-report/vulnerability/wordpress-woocommerce-sa
rences: - https://patchstack.com/database/wordpress/plugin/woocommerce-mis-report/vulnerability/wordpress-woocommerce-sales-mis-report-plugin-4-0-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32542 State: PUBLISHED Published: 2025-04-11T08:42:55.599Z Last Updated: 2025-04-11T14:18:44.784Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: EazyPlugins Products: Eazy Plugin Manager Problem Types: CWE-862 Description: Missing Authorization vulnerability in EazyPlugins Eazy Plugin Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Eazy Plugin Manager: from n/a through 4.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/plugins-on-steroids/vulnerability/wordpress-eazy-plugin-manager-plugin-4-3-0-broken-access-control-vulner
rdpress/plugin/plugins-on-steroids/vulnerability/wordpress-eazy-plugin-manager-plugin-4-3-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-32543 State: PUBLISHED Published: 2025-04-09T16:09:39.930Z Last Updated: 2025-04-09T18:00:54.851Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: hivedigital Products: Canonical Attachments Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hivedigital Canonical Attachments allows Reflected XSS. This issue affects Canonical Attachments: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/canonical-attachments/vulnerability/wordpress-canonical-attachments-plugin-1-7-stored-cros
com/database/wordpress/plugin/canonical-attachments/vulnerability/wordpress-canonical-attachments-plugin-1-7-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32544 State: PUBLISHED Published: 2025-04-17T15:47:34.882Z Last Updated: 2025-04-17T18:27:09.923Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: The Right Software Products: WooCommerce Loyal Customers Problem Types: CWE-862 Description: Missing Authorization vulnerability in The Right Software WooCommerce Loyal Customers allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WooCommerce Loyal Customers: from n/a through 2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-loyal-customer/vulnerability/wordpress-woocommerce-loyal-customer
//patchstack.com/database/wordpress/plugin/woocommerce-loyal-customer/vulnerability/wordpress-woocommerce-loyal-customers-plugin-2-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-32545 State: PUBLISHED Published: 2025-04-17T15:47:34.259Z Last Updated: 2025-04-17T18:27:19.569Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: SOFTAGON Products: WooCommerce Products without featured images Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in SOFTAGON WooCommerce Products without featured images allows Reflected XSS. This issue affects WooCommerce Products without featured images: from n/a through 0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-products-without-featured-images/vulnerability/wordpress-woocomme
//patchstack.com/database/wordpress/plugin/woocommerce-products-without-featured-images/vulnerability/wordpress-woocommerce-products-without-featured-images-plugin-0-1-csrf-to-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32546 State: PUBLISHED Published: 2025-04-17T15:47:33.662Z Last Updated: 2025-04-17T18:27:28.859Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: gtlwpdev Products: All push notification for WP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in gtlwpdev All push notification for WP allows Reflected XSS. This issue affects All push notification for WP: from n/a through 1.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/all-push-notification/vulnerability/wordpress-all-push-notification-for-wp-plugin-1-5-3-csrf-to-reflected-cross-site-script
-push-notification/vulnerability/wordpress-all-push-notification-for-wp-plugin-1-5-3-csrf-to-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32547 State: PUBLISHED Published: 2025-04-09T16:09:39.304Z Last Updated: 2025-04-09T18:01:10.586Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L) Vendors: gtlwpdev Products: All push notification for WP Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in gtlwpdev All push notification for WP allows Blind SQL Injection. This issue affects All push notification for WP: from n/a through 1.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/all-push-notification/vulnerability/wordpress-all-push-notification-for-wp-plugin-1-5-3-csrf-to-sql-injection-vulnera
in/all-push-notification/vulnerability/wordpress-all-push-notification-for-wp-plugin-1-5-3-csrf-to-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32548 State: PUBLISHED Published: 2025-04-17T15:47:32.998Z Last Updated: 2025-04-17T18:27:37.239Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: borisolhor Products: Hamburger Icon Menu Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in borisolhor Hamburger Icon Menu Lite allows Reflected XSS. This issue affects Hamburger Icon Menu Lite: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/hamburger-icon-menu-lite/vulnerability/wordpress-hamburger-icon-menu-lite-plugin-1-
hstack.com/database/wordpress/plugin/hamburger-icon-menu-lite/vulnerability/wordpress-hamburger-icon-menu-lite-plugin-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32549 State: PUBLISHED Published: 2025-06-17T15:01:36.146Z Last Updated: 2025-06-17T18:36:54.333Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: mojoomla Products: WPGYM Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in mojoomla WPGYM allows PHP Local File Inclusion. This issue affects WPGYM: from n/a through 65.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gym-management/vulnerability/wordpress-wpgym-65-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32550 State: PUBLISHED Published: 2025-04-09T16:09:38.648Z Last Updated: 2025-04-09T18:01:25.898Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L) Vendors: ClickandPledge Products: Click & Pledge Connect Plugin Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickandPledge Click & Pledge Connect Plugin allows SQL Injection. This issue affects Click & Pledge Connect Plugin: from 2.24080000 through WP6.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/click-pledge-connect/vulnerability/wordpress-clic
chment: References: - https://patchstack.com/database/wordpress/plugin/click-pledge-connect/vulnerability/wordpress-click-pledge-connect-plugin-plugin-2-24080000-wp6-6-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32551 State: PUBLISHED Published: 2025-04-11T08:42:55.876Z Last Updated: 2025-04-11T14:09:31.653Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Jaap Jansma Products: Connector to CiviCRM with CiviMcRestFace Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jaap Jansma Connector to CiviCRM with CiviMcRestFace allows Reflected XSS. This issue affects Connector to CiviCRM with CiviMcRestFace: from n/a through 1.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/connector-civicrm-mcrestface/vu
- CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/connector-civicrm-mcrestface/vulnerability/wordpress-connector-to-civicrm-with-civimcrestface-plugin-1-0-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32552 State: PUBLISHED Published: 2025-04-17T15:47:32.374Z Last Updated: 2025-04-17T18:27:47.027Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WPFactory Products: MSRP (RRP) Pricing for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory MSRP (RRP) Pricing for WooCommerce allows Reflected XSS. This issue affects MSRP (RRP) Pricing for WooCommerce: from n/a through 1.8.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/msrp-for-woocommerce/vulnerability/wordpress-msrp-rrp
nt: References: - https://patchstack.com/database/wordpress/plugin/msrp-for-woocommerce/vulnerability/wordpress-msrp-rrp-pricing-for-woocommerce-plugin-1-7-12-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32553 State: PUBLISHED Published: 2025-04-11T08:42:56.054Z Last Updated: 2025-04-11T14:01:02.400Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Magnigenie Products: RestroPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magnigenie RestroPress allows Reflected XSS. This issue affects RestroPress: from n/a through 3.1.8.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/restropress/vulnerability/wordpress-restropres-plugin-3-1-8-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=c
n/restropress/vulnerability/wordpress-restropres-plugin-3-1-8-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32554 State: PUBLISHED Published: 2025-04-17T15:47:31.803Z Last Updated: 2025-04-17T18:27:55.973Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Raptive Products: Raptive Ads Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Raptive Raptive Ads allows Reflected XSS. This issue affects Raptive Ads: from n/a through 3.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/adthrive-ads/vulnerability/wordpress-raptive-ads-plugin-3-7-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32555 State: PUBLISHED Published: 2025-04-09T16:09:37.984Z Last Updated: 2025-04-09T18:01:48.363Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Edamam Products: SEO, Nutrition and Print for Recipes by Edamam Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Edamam SEO, Nutrition and Print for Recipes by Edamam allows Stored XSS. This issue affects SEO, Nutrition and Print for Recipes by Edamam: from n/a through 3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/seo-nutrition-and-print-for-recipes-by-edamam/vulnerability/wordpress-seo-nutr
/patchstack.com/database/wordpress/plugin/seo-nutrition-and-print-for-recipes-by-edamam/vulnerability/wordpress-seo-nutrition-and-print-for-recipes-by-edamam-plugin-3-3-csrf-to-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2025-32556 State: PUBLISHED Published: 2025-04-09T16:09:37.267Z Last Updated: 2025-04-09T18:02:04.315Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Sandor Kovacs Products: Simple Post Meta Manager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Sandor Kovacs Simple Post Meta Manager allows Reflected XSS. This issue affects Simple Post Meta Manager: from n/a through 1.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-post-meta-manager/vulnerability/wordpress-simple-post-meta-manager-plugin-1-0-9-csrf-to-reflected-cross-site-scripting
e-post-meta-manager/vulnerability/wordpress-simple-post-meta-manager-plugin-1-0-9-csrf-to-reflected-cross-site-scripting-vulnerability?_s_id=cve
CVE ID: CVE-2025-32557 State: PUBLISHED Published: 2025-04-17T15:47:31.229Z Last Updated: 2025-04-17T18:28:04.676Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Rico Macchi Products: WP Featured Screenshot Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rico Macchi WP Featured Screenshot allows Reflected XSS. This issue affects WP Featured Screenshot: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-featured-screenshot/vulnerability/wordpress-wp-featured-screenshot-plugin-1-3-reflec
ck.com/database/wordpress/plugin/wp-featured-screenshot/vulnerability/wordpress-wp-featured-screenshot-plugin-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32558 State: PUBLISHED Published: 2025-04-11T08:42:56.299Z Last Updated: 2025-04-11T13:52:40.050Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: ketanajani Products: Duplicate Title Checker Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ketanajani Duplicate Title Checker allows Blind SQL Injection. This issue affects Duplicate Title Checker: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/duplicate-title-checker/vulnerability/wordpress-duplicate-title-checker-plugin-1
atchstack.com/database/wordpress/plugin/duplicate-title-checker/vulnerability/wordpress-duplicate-title-checker-plugin-1-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32559 State: PUBLISHED Published: 2025-04-09T16:09:36.597Z Last Updated: 2025-04-09T18:02:19.155Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: REVE Chat Products: REVE Chat Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in REVE Chat REVE Chat allows Stored XSS. This issue affects REVE Chat: from n/a through 6.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/revechat/vulnerability/wordpress-reve-chat-plugin-6-2-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32560 State: PUBLISHED Published: 2025-04-17T15:47:30.634Z Last Updated: 2025-04-17T18:28:15.577Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Mohammad I. Okfie Products: WP-Hijri Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mohammad I. Okfie WP-Hijri allows Reflected XSS. This issue affects WP-Hijri: from n/a through 1.5.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-hijri/vulnerability/wordpress-wp-hijri-plugin-1-5-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32561 State: PUBLISHED Published: 2025-04-17T15:47:30.034Z Last Updated: 2025-04-17T18:28:23.867Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: plugins.club Products: WP_DEBUG Toggle Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in plugins.club WP_DEBUG Toggle allows Reflected XSS. This issue affects WP_DEBUG Toggle: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/enable-wp-debug-toggle/vulnerability/wordpress-wp-debug-toggle-plugin-1-1-reflected-cross-site-scripting-x
dpress/plugin/enable-wp-debug-toggle/vulnerability/wordpress-wp-debug-toggle-plugin-1-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32562 State: PUBLISHED Published: 2025-04-17T15:47:29.400Z Last Updated: 2025-04-17T18:28:33.926Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: aviplugins.com Products: WP Easy Poll Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aviplugins.com WP Easy Poll allows Reflected XSS. This issue affects WP Easy Poll: from n/a through 2.2.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-easy-poll-afo/vulnerability/wordpress-wp-easy-poll-plugin-2-2-9-reflected-cross-site-scripting-xss-vulnera
ess/plugin/wp-easy-poll-afo/vulnerability/wordpress-wp-easy-poll-plugin-2-2-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32563 State: PUBLISHED Published: 2025-04-09T16:09:35.794Z Last Updated: 2025-04-09T18:02:33.718Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: dangrossman Products: WP Calais Auto Tagger Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in dangrossman WP Calais Auto Tagger allows Cross Site Request Forgery. This issue affects WP Calais Auto Tagger: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/calais-auto-tagger/vulnerability/wordpress-wp-calais-auto-tagger-plugin-2-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32564 State: PUBLISHED Published: 2025-04-17T15:47:28.798Z Last Updated: 2025-04-17T18:28:41.969Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: tomroyal Products: Stop Registration Spam Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tomroyal Stop Registration Spam allows Reflected XSS. This issue affects Stop Registration Spam: from n/a through 1.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/stop-registration-spam/vulnerability/wordpress-stop-registration-spam-plugin-1-24-reflected-
m/database/wordpress/plugin/stop-registration-spam/vulnerability/wordpress-stop-registration-spam-plugin-1-24-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32565 State: PUBLISHED Published: 2025-04-11T08:42:56.513Z Last Updated: 2025-04-11T13:52:30.213Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: vertim Products: Neon Product Designer Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vertim Neon Product Designer allows SQL Injection. This issue affects Neon Product Designer: from n/a through 2.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/neon-product-designer-for-woocommerce/vulnerability/wordpress-neon-product-designer-plugin-2-1
database/wordpress/plugin/neon-product-designer-for-woocommerce/vulnerability/wordpress-neon-product-designer-plugin-2-1-1-unauthenticated-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32566 State: PUBLISHED Published: 2025-04-17T15:47:28.218Z Last Updated: 2025-04-17T18:28:52.986Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ashraful Sarkar Naiem Products: License For Envato Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashraful Sarkar Naiem License For Envato allows Reflected XSS. This issue affects License For Envato: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/license-envato/vulnerability/wordpress-license-for-envato-plugin-1-0-0-reflec
//patchstack.com/database/wordpress/plugin/license-envato/vulnerability/wordpress-license-for-envato-plugin-1-0-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32567 State: PUBLISHED Published: 2025-04-11T08:42:56.709Z Last Updated: 2025-04-11T13:52:22.364Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: dev02ali Products: Easy Post Duplicator Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in dev02ali Easy Post Duplicator allows SQL Injection. This issue affects Easy Post Duplicator: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-post-duplicator/vulnerability/wordpress-easy-post-duplicator-plugin-1-0-1-sql-injection-vuln
abase/wordpress/plugin/easy-post-duplicator/vulnerability/wordpress-easy-post-duplicator-plugin-1-0-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32568 State: PUBLISHED Published: 2025-04-11T08:42:56.940Z Last Updated: 2025-04-11T13:52:14.406Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: empik Products: EmpikPlace for Woocommerce Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in empik EmpikPlace for Woocommerce allows Object Injection. This issue affects EmpikPlace for Woocommerce: from n/a through 1.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/empik-for-woocommerce/vulnerability/wordpress-empikplace-for-woocommerce-plugin-1-4-2-php-object-injection-vulnerability?_s_id=c
r-woocommerce/vulnerability/wordpress-empikplace-for-woocommerce-plugin-1-4-2-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-32569 State: PUBLISHED Published: 2025-04-11T08:42:57.099Z Last Updated: 2025-04-11T13:52:04.800Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: RealMag777 Products: TableOn – WordPress Posts Table Filterable Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in RealMag777 TableOn – WordPress Posts Table Filterable allows Object Injection. This issue affects TableOn – WordPress Posts Table Filterable: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/posts-table-filterable/vulnerability/wordpress-tableon-plugin-1-0-2-ph
https://patchstack.com/database/wordpress/plugin/posts-table-filterable/vulnerability/wordpress-tableon-plugin-1-0-2-php-object-injection-vulnerability?_s_id=cve