Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-58866 State: PUBLISHED Published: 2025-09-05T13:45:43.028Z Last Updated: 2025-09-05T14:34:39.043Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Rami Yushuvaev Products: Site Info Problem Types: CWE-497 Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Rami Yushuvaev Site Info allows Retrieve Embedded Sensitive Data. This issue affects Site Info: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/site-info-dashboard-widget/vulnerability/wordpress-site-info-plugin-1-1-sensitive-data-exposure-vulnerability?_
s/plugin/site-info-dashboard-widget/vulnerability/wordpress-site-info-plugin-1-1-sensitive-data-exposure-vulnerability?_s_id=cve
CVE ID: CVE-2025-58867 State: PUBLISHED Published: 2025-09-05T13:45:43.560Z Last Updated: 2025-09-05T14:34:10.310Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Remi Corson Products: Easy Download Media Counter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Remi Corson Easy Download Media Counter allows Stored XSS. This issue affects Easy Download Media Counter: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-download-media-counter/vulnerability/wordpress-easy-download-media-c
tps://patchstack.com/database/wordpress/plugin/easy-download-media-counter/vulnerability/wordpress-easy-download-media-counter-plugin-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58868 State: PUBLISHED Published: 2025-09-05T13:45:44.069Z Last Updated: 2025-09-05T14:33:39.043Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Simasicher Products: SimaCookie Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Simasicher SimaCookie allows Stored XSS. This issue affects SimaCookie: from n/a through 1.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simasicher-dsgvo-cookie/vulnerability/wordpress-simacookie-plugin-1-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58869 State: PUBLISHED Published: 2025-09-05T13:45:44.576Z Last Updated: 2025-09-05T14:51:59.753Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Simasicher Products: SimaCookie Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Simasicher SimaCookie allows Stored XSS. This issue affects SimaCookie: from n/a through 1.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simasicher-dsgvo-cookie/vulnerability/wordpress-simacookie-plugin-1-3-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58870 State: PUBLISHED Published: 2025-09-05T13:45:45.725Z Last Updated: 2025-09-05T14:49:00.617Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: DeBAAT Products: WP-GraphViz Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DeBAAT WP-GraphViz allows DOM-Based XSS. This issue affects WP-GraphViz: from n/a through 1.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-graphviz/vulnerability/wordpress-wp-graphviz-plugin-1-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58871 State: PUBLISHED Published: 2025-09-05T13:45:46.319Z Last Updated: 2025-09-05T14:46:34.499Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Luis Rock Products: Master Paper Collapse Toggle Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Luis Rock Master Paper Collapse Toggle allows Stored XSS. This issue affects Master Paper Collapse Toggle: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/master-paper-collapse-toggle/vulnerability/wordpress-master-paper-collapse
ps://patchstack.com/database/wordpress/plugin/master-paper-collapse-toggle/vulnerability/wordpress-master-paper-collapse-toggle-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58872 State: PUBLISHED Published: 2025-09-05T13:45:46.869Z Last Updated: 2025-09-05T14:45:05.136Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: premiumbizthemes Products: Simple Price Calculator Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in premiumbizthemes Simple Price Calculator allows Retrieve Embedded Sensitive Data. This issue affects Simple Price Calculator: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-price-calculator-basic/vulnerability/wordpress-simple-price-calculator-plugin-1-
ck.com/database/wordpress/plugin/simple-price-calculator-basic/vulnerability/wordpress-simple-price-calculator-plugin-1-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58873 State: PUBLISHED Published: 2025-09-05T13:45:47.524Z Last Updated: 2025-09-05T14:41:45.642Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: pusheco Products: Pushe Web Push Notification Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pusheco Pushe Web Push Notification allows Stored XSS. This issue affects Pushe Web Push Notification: from n/a through 0.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pushe-webpush/vulnerability/wordpress-pushe-web-push-notification-plugin-0-5-0-
patchstack.com/database/wordpress/plugin/pushe-webpush/vulnerability/wordpress-pushe-web-push-notification-plugin-0-5-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58874 State: PUBLISHED Published: 2025-09-05T13:45:48.108Z Last Updated: 2025-09-05T14:40:05.527Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: josepsitjar Products: StoryMap Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in josepsitjar StoryMap allows DOM-Based XSS. This issue affects StoryMap: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-storymap/vulnerability/wordpress-storymap-plugin-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58875 State: PUBLISHED Published: 2025-09-05T13:45:48.650Z Last Updated: 2025-09-05T14:32:58.393Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Sudar Muthu Products: WP Github Gist Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sudar Muthu WP Github Gist allows Stored XSS. This issue affects WP Github Gist: from n/a through 0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-github-gist/vulnerability/wordpress-wp-github-gist-plugin-0-5-cross-site-scripting-xss-vulnerability?_s_id=cv
/plugin/wp-github-gist/vulnerability/wordpress-wp-github-gist-plugin-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58876 State: PUBLISHED Published: 2025-09-05T13:45:49.200Z Last Updated: 2025-09-05T14:32:41.119Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Ali Aghdam Products: Aparat Video Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ali Aghdam Aparat Video Shortcode allows Stored XSS. This issue affects Aparat Video Shortcode: from n/a through 0.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/aparat-shortcode/vulnerability/wordpress-aparat-video-shortcode-plugin-0-2-4-cross-site-
k.com/database/wordpress/plugin/aparat-shortcode/vulnerability/wordpress-aparat-video-shortcode-plugin-0-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58878 State: PUBLISHED Published: 2025-09-05T13:45:49.748Z Last Updated: 2025-09-05T14:32:19.635Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: usamafarooq Products: Woocommerce Gifts Product Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in usamafarooq Woocommerce Gifts Product allows Cross Site Request Forgery. This issue affects Woocommerce Gifts Product: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woo-gift-product/vulnerability/wordpress-woocommerce-gifts-product-plugin-1-0-0-cross-site-request-forgery-csrf
s/plugin/woo-gift-product/vulnerability/wordpress-woocommerce-gifts-product-plugin-1-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58880 State: PUBLISHED Published: 2025-09-05T13:45:50.272Z Last Updated: 2025-09-05T14:31:56.012Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: reubenthiessen Products: Translate This gTranslate Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reubenthiessen Translate This gTranslate Shortcode allows Stored XSS. This issue affects Translate This gTranslate Shortcode: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/translate-this-google-translate-web-element
Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/translate-this-google-translate-web-element-shortcode/vulnerability/wordpress-translate-this-gtranslate-shortcode-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58881 State: PUBLISHED Published: 2025-09-05T13:45:50.949Z Last Updated: 2025-09-05T14:31:38.451Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: gopiplus Products: New Simple Gallery Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in gopiplus New Simple Gallery allows Blind SQL Injection. This issue affects New Simple Gallery: from n/a through 8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/new-simple-gallery/vulnerability/wordpress-new-simple-gallery-plugin-8-0-sql-injection-vulnerabilit
ase/wordpress/plugin/new-simple-gallery/vulnerability/wordpress-new-simple-gallery-plugin-8-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-58882 State: PUBLISHED Published: 2025-09-05T13:45:51.510Z Last Updated: 2025-09-05T14:31:19.578Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: w1zzard Products: Simple Text Slider Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in w1zzard Simple Text Slider allows Stored XSS. This issue affects Simple Text Slider: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-text-slider/vulnerability/wordpress-simple-text-slider-plugin-1-0-5-cross-site-scripting-xss-vulner
dpress/plugin/simple-text-slider/vulnerability/wordpress-simple-text-slider-plugin-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58883 State: PUBLISHED Published: 2025-09-05T13:45:52.040Z Last Updated: 2025-09-05T14:30:59.887Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Thomas Harris Products: Search Cloud One Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Thomas Harris Search Cloud One allows Stored XSS. This issue affects Search Cloud One: from n/a through 2.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/search-cloud-one/vulnerability/wordpress-search-cloud-one-plugin-2-2-5-cross-site-scripting-xss-vuln
se/wordpress/plugin/search-cloud-one/vulnerability/wordpress-search-cloud-one-plugin-2-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58884 State: PUBLISHED Published: 2025-09-05T13:45:52.562Z Last Updated: 2025-09-05T14:30:38.556Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Ivan Drago Products: vipdrv Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ivan Drago vipdrv allows Stored XSS. This issue affects vipdrv: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/vipdrv-vip-test-drive/vulnerability/wordpress-vipdrv-plugin-1-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58886 State: PUBLISHED Published: 2025-09-05T13:45:53.126Z Last Updated: 2025-09-05T14:30:18.532Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Tan Nguyen Products: Instant Locations Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tan Nguyen Instant Locations allows Stored XSS. This issue affects Instant Locations: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/instant-locations/vulnerability/wordpress-instant-locations-plugin-1-0-cross-site-scripting-xss-vulnerabi
rdpress/plugin/instant-locations/vulnerability/wordpress-instant-locations-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58887 State: PUBLISHED Published: 2025-09-05T13:45:53.670Z Last Updated: 2025-09-05T14:05:24.708Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Course Finder | andré martin - it solutions & research UG Products: Course Booking Platform Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Course Finder | andré martin - it solutions & research UG Course Booking Platform allows Stored XSS. This issue affects Course Booking Platform: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpres
through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/course-booking-platform/vulnerability/wordpress-course-booking-platform-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58903 State: PUBLISHED Published: 2025-10-14T15:22:34.563Z Last Updated: 2025-10-16T17:37:30.279Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: Fortinet Products: FortiOS Problem Types: CWE-252 Description: An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer Dereference, crashing the http daemon via a specialy crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-25-653
CVE ID: CVE-2025-58904 State: REJECTED Published: N/A Last Updated: 2025-09-06T02:55:09.812Z Description: No description available.
CVE ID: CVE-2025-58905 State: REJECTED Published: N/A Last Updated: 2025-09-06T02:55:09.329Z Description: No description available.
CVE ID: CVE-2025-58906 State: REJECTED Published: N/A Last Updated: 2025-09-06T02:55:08.850Z Description: No description available.
CVE ID: CVE-2025-58907 State: REJECTED Published: N/A Last Updated: 2025-09-06T02:55:08.360Z Description: No description available.
CVE ID: CVE-2025-58908 State: REJECTED Published: N/A Last Updated: 2025-09-06T02:55:07.866Z Description: No description available.
CVE ID: CVE-2025-58909 State: REJECTED Published: N/A Last Updated: 2025-09-06T02:55:07.411Z Description: No description available.
CVE ID: CVE-2025-58910 State: REJECTED Published: N/A Last Updated: 2025-09-06T02:55:06.946Z Description: No description available.
CVE ID: CVE-2025-58911 State: REJECTED Published: N/A Last Updated: 2025-09-06T02:55:06.410Z Description: No description available.
CVE ID: CVE-2025-58912 State: REJECTED Published: N/A Last Updated: 2025-09-06T02:55:05.877Z Description: No description available.
CVE ID: CVE-2025-58914 State: PUBLISHED Published: 2025-09-26T08:31:12.200Z Last Updated: 2025-09-26T14:06:13.431Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Di Themes Products: Di Themes Demo Site Importer Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Di Themes Di Themes Demo Site Importer allows Cross Site Request Forgery. This issue affects Di Themes Demo Site Importer: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/di-themes-demo-site-importer/vulnerability/wordpress-di-themes-demo-site-importer-plugin-1-2-cross-site-requ
ress/plugin/di-themes-demo-site-importer/vulnerability/wordpress-di-themes-demo-site-importer-plugin-1-2-cross-site-request-forgery-csrf-to-plugin-activation-vulnerability?_s_id=cve
CVE ID: CVE-2025-58915 State: PUBLISHED Published: 2025-09-23T02:08:41.364Z Last Updated: 2025-09-23T15:16:06.672Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Emarket-design Products: YouTube Showcase Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Emarket-design YouTube Showcase youtube-showcase allows Stored XSS.This issue affects YouTube Showcase: from n/a through 3.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/youtube-showcase/vulnerability/wordpress-youtube-showcase-plugin-3-5-0-cross-site-
chstack.com/database/wordpress/plugin/youtube-showcase/vulnerability/wordpress-youtube-showcase-plugin-3-5-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58916 State: PUBLISHED Published: 2025-10-22T14:32:34.398Z Last Updated: 2025-11-13T10:33:42.974Z Vendors: Munzir Products: Author: Munzir Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Munzir Author: Munzir myshouts-shoutbox allows Reflected XSS.This issue affects Author: Munzir: from n/a through <= 0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/myshouts-shoutbox/vulnerability/wordpress-author-munzir-plugin-0-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58917 State: PUBLISHED Published: 2025-09-26T08:31:11.603Z Last Updated: 2025-09-29T16:35:25.236Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Nick Verwymeren Products: Quantities and Units for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nick Verwymeren Quantities and Units for WooCommerce allows Stored XSS. This issue affects Quantities and Units for WooCommerce: from n/a through 1.0.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/quantities-and-units-for-woocommerc
ISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/quantities-and-units-for-woocommerce/vulnerability/wordpress-quantities-and-units-for-woocommerce-plugin-1-0-13-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58918 State: PUBLISHED Published: 2025-10-27T02:07:49.744Z Last Updated: 2025-10-27T14:45:34.467Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Waituk Products: Entrada Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Waituk Entrada theme allows Cross Site Request Forgery.This issue affects Entrada: from n/a through 5.7.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/WordPress/Theme/entrada/vulnerability/wordpress-entrada-theme-5-7-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58919 State: PUBLISHED Published: 2025-09-26T08:31:11.008Z Last Updated: 2025-09-29T16:38:23.716Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: guihom Products: Wide Banner Problem Types: CWE-862 Description: Missing Authorization vulnerability in guihom Wide Banner allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Wide Banner: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wide-banner/vulnerability/wordpress-wide-banner-plugin-1-0-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-58921 State: PUBLISHED Published: 2025-10-22T14:32:34.600Z Last Updated: 2025-11-13T10:33:42.949Z Vendors: Arevico Products: WP Tactical Popup Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arevico WP Tactical Popup wp-tactical-popup allows Reflected XSS.This issue affects WP Tactical Popup: from n/a through <= 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-tactical-popup/vulnerability/wordpress-wp-tactical-popup-plugin-1-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-58939 State: PUBLISHED Published: 2025-10-29T08:38:02.625Z Last Updated: 2025-11-13T10:33:42.959Z Vendors: highwarden Products: Super Store Finder Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in highwarden Super Store Finder superstorefinder-wp allows Cross Site Request Forgery.This issue affects Super Store Finder: from n/a through <= 7.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/superstorefinder-wp/vulnerability/wordpress-super-store-finder-plugin-7-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-58955 State: PUBLISHED Published: 2025-10-22T14:32:34.802Z Last Updated: 2025-11-13T10:33:42.921Z Vendors: designervily Products: Karzo Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in designervily Karzo karzo allows PHP Local File Inclusion.This issue affects Karzo: from n/a through < 2.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/karzo/vulnerability/wordpress-karzo-theme-2-6-local-file-inclusion-vulnerability?_s_id=cve