Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-23885 State: PUBLISHED Published: 2025-01-24T10:52:57.250Z Last Updated: 2025-01-27T15:18:22.386Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: MJ Contact us Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound MJ Contact us allows Reflected XSS. This issue affects MJ Contact us: from n/a through 5.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mj-contact-us/vulnerability/wordpress-mj-contact-us-plugin-5-2-3-reflected-cross-site-scripting-xss-vulnerability?_s_i
n/mj-contact-us/vulnerability/wordpress-mj-contact-us-plugin-5-2-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23886 State: PUBLISHED Published: 2025-01-16T20:07:34.387Z Last Updated: 2025-01-17T19:02:30.437Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Chris Roberts Products: Annie Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Roberts Annie allows Stored XSS.This issue affects Annie: from n/a through 2.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/annie/vulnerability/wordpress-annie-plugin-2-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23887 State: PUBLISHED Published: 2025-01-16T20:07:42.099Z Last Updated: 2025-01-17T21:50:00.490Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Scott Allan Wallick Products: Blog Summary Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Allan Wallick Blog Summary allows Stored XSS.This issue affects Blog Summary: from n/a through 0.1.2 β. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/blog-summary/vulnerability/wordpress-blog-summary-plugin-0-1-2-v-cross-site-scripting-xss-vulnerabi
ase/wordpress/plugin/blog-summary/vulnerability/wordpress-blog-summary-plugin-0-1-2-v-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23888 State: PUBLISHED Published: 2025-01-24T10:52:57.422Z Last Updated: 2025-02-12T20:01:21.023Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Custom Page Extensions Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Custom Page Extensions allows Reflected XSS. This issue affects Custom Page Extensions: from n/a through 0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-page-extensions/vulnerability/wordpress-custom-page-extensions-plugin-0-6-cross-site-s
/database/wordpress/plugin/custom-page-extensions/vulnerability/wordpress-custom-page-extensions-plugin-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23889 State: PUBLISHED Published: 2025-01-24T10:52:57.673Z Last Updated: 2025-02-12T20:01:20.888Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: FooGallery Captions Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound FooGallery Captions allows Reflected XSS. This issue affects FooGallery Captions: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/foogallery-captions/vulnerability/wordpress-foogallery-captions-plugin-1-0-2-reflected-cross-site-sc
se/wordpress/plugin/foogallery-captions/vulnerability/wordpress-foogallery-captions-plugin-1-0-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23890 State: PUBLISHED Published: 2025-01-16T20:07:38.968Z Last Updated: 2025-01-17T19:01:27.692Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Tom Ewer and Tito Pandu Products: Easy Tweet Embed Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tom Ewer and Tito Pandu Easy Tweet Embed allows DOM-Based XSS.This issue affects Easy Tweet Embed: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-tweet-embed/vulnerability/wordpress-easy-tweet-embed-plugin-1-7-cross-site-
atchstack.com/database/wordpress/plugin/easy-tweet-embed/vulnerability/wordpress-easy-tweet-embed-plugin-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23891 State: PUBLISHED Published: 2025-01-16T20:07:41.466Z Last Updated: 2025-01-17T21:51:02.043Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Vincent Loy Products: Yet Another Countdown Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vincent Loy Yet Another Countdown allows DOM-Based XSS.This issue affects Yet Another Countdown: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/yacp/vulnerability/wordpress-yet-another-countdown-plugin-plugin-1-0-1-cross-site-scrip
ck.com/database/wordpress/plugin/yacp/vulnerability/wordpress-yet-another-countdown-plugin-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23892 State: PUBLISHED Published: 2025-01-16T20:07:40.234Z Last Updated: 2025-01-17T21:52:58.506Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Alex Furr and Simon Ward Products: Progress Tracker Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Furr and Simon Ward Progress Tracker allows DOM-Based XSS.This issue affects Progress Tracker: from n/a through 0.9.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/progress-tracker/vulnerability/wordpress-progress-tracker-plugin-0-9-3-cross
://patchstack.com/database/wordpress/plugin/progress-tracker/vulnerability/wordpress-progress-tracker-plugin-0-9-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23893 State: PUBLISHED Published: 2025-01-16T20:07:35.658Z Last Updated: 2025-01-17T19:02:03.614Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Manuel Costales Products: GMap Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Manuel Costales GMap Shortcode allows DOM-Based XSS.This issue affects GMap Shortcode: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gmap-shortcode/vulnerability/wordpress-gmap-shortcode-plugin-2-0-cross-site-scripting-xss-vulnerabilit
/wordpress/plugin/gmap-shortcode/vulnerability/wordpress-gmap-shortcode-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23894 State: PUBLISHED Published: 2025-01-23T15:29:43.141Z Last Updated: 2025-02-12T20:41:25.008Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Tatsuya Fukata, Alexander Ovsov Products: wp-flickr-press Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tatsuya Fukata, Alexander Ovsov wp-flickr-press allows Reflected XSS. This issue affects wp-flickr-press: from n/a through 2.6.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-flickr-press/vulnerability/wordpress-wp-flickr-press-plugin-2-6
s: - https://patchstack.com/database/wordpress/plugin/wp-flickr-press/vulnerability/wordpress-wp-flickr-press-plugin-2-6-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23895 State: PUBLISHED Published: 2025-01-16T20:07:37.944Z Last Updated: 2025-01-17T19:01:40.673Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Dan Cameron Products: Add RSS Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Dan Cameron Add RSS allows Stored XSS.This issue affects Add RSS: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/add-rss/vulnerability/wordpress-add-rss-plugin-1-5-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23896 State: PUBLISHED Published: 2025-01-16T20:07:39.591Z Last Updated: 2025-01-17T19:01:16.795Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Oncle Tom Products: Mindmeister Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oncle Tom Mindmeister Shortcode allows DOM-Based XSS.This issue affects Mindmeister Shortcode: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mindmeister-shortcode/vulnerability/wordpress-mindmeister-shortcode-plugin-1-0-cross-site-scr
/database/wordpress/plugin/mindmeister-shortcode/vulnerability/wordpress-mindmeister-shortcode-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23897 State: PUBLISHED Published: 2025-01-16T20:07:44.500Z Last Updated: 2025-01-17T19:00:53.235Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Ivo Brett – ApplyMetrics Products: Apply with LinkedIn buttons Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ivo Brett – ApplyMetrics Apply with LinkedIn buttons allows DOM-Based XSS.This issue affects Apply with LinkedIn buttons: from n/a through 2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/apply-with-linkedin-buttons/vulnerability/wor
lnrichment: References: - https://patchstack.com/database/wordpress/plugin/apply-with-linkedin-buttons/vulnerability/wordpress-apply-with-linkedin-buttons-plugin-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23898 State: PUBLISHED Published: 2025-01-16T20:07:43.857Z Last Updated: 2025-01-17T19:01:04.133Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Ivo Brett – ApplyMetrics Products: Apply with LinkedIn buttons Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Ivo Brett – ApplyMetrics Apply with LinkedIn buttons allows Stored XSS.This issue affects Apply with LinkedIn buttons: from n/a through 2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/apply-with-linkedin-buttons/vulnerability/wordpress-apply-with-linkedin-buttons-plugin-2-3-csrf-to-s
se/wordpress/plugin/apply-with-linkedin-buttons/vulnerability/wordpress-apply-with-linkedin-buttons-plugin-2-3-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23899 State: PUBLISHED Published: 2025-01-16T20:07:45.187Z Last Updated: 2025-01-17T19:00:39.148Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: BnB Select Ltd Products: Bookalet Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BnB Select Ltd Bookalet allows Stored XSS.This issue affects Bookalet: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bookalet/vulnerability/wordpress-bookalet-plugin-1-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23900 State: PUBLISHED Published: 2025-01-16T20:07:46.998Z Last Updated: 2025-01-17T19:00:15.798Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Genkisan Products: Genki Announcement Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Genkisan Genki Announcement allows Cross Site Request Forgery.This issue affects Genki Announcement: from n/a through 1.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/genki-announcement/vulnerability/wordpress-genki-announcement-plugin-1-4-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23901 State: PUBLISHED Published: 2025-01-16T20:07:50.207Z Last Updated: 2025-01-17T18:58:28.068Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Oliver Schaal Products: GravatarLocalCache Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Oliver Schaal GravatarLocalCache allows Cross Site Request Forgery.This issue affects GravatarLocalCache: from n/a through 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gravatarlocalcache/vulnerability/wordpress-gravatarlocalcache-plugin-1-1-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23902 State: PUBLISHED Published: 2025-01-16T20:07:45.827Z Last Updated: 2025-01-17T19:00:27.705Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Taras Dashkevych Products: Error Notification Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Taras Dashkevych Error Notification allows Cross Site Request Forgery.This issue affects Error Notification: from n/a through 0.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/error-notification/vulnerability/wordpress-error-notification-plugin-0-2-7-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23903 State: PUBLISHED Published: 2025-03-03T13:30:20.665Z Last Updated: 2025-05-12T15:29:12.909Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Local Shipping Labels for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Local Shipping Labels for WooCommerce allows Reflected XSS. This issue affects Local Shipping Labels for WooCommerce: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/local-shipping-labels-for-woocommerce/vulnerab
nrichment: References: - https://patchstack.com/database/wordpress/plugin/local-shipping-labels-for-woocommerce/vulnerability/wordpress-local-shipping-labels-for-woocommerce-plugin-1-0-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23904 State: PUBLISHED Published: 2025-03-03T13:30:20.831Z Last Updated: 2025-05-12T15:29:54.299Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: NotFound Products: Rebrand Fluent Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Rebrand Fluent Forms allows Reflected XSS. This issue affects Rebrand Fluent Forms: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rebrand-fluent-forms/vulnerability/wordpress-rebrand-fluent-forms-plugin-1-0-reflected-cross-site-s
ase/wordpress/plugin/rebrand-fluent-forms/vulnerability/wordpress-rebrand-fluent-forms-plugin-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23905 State: PUBLISHED Published: 2025-02-14T12:45:33.824Z Last Updated: 2025-02-14T13:28:57.353Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Johannes van Poelgeest Products: Admin Options Pages Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Johannes van Poelgeest Admin Options Pages allows Reflected XSS. This issue affects Admin Options Pages: from n/a through 0.9.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/admin-options-pages/vulnerability/wordpress-admin-options-pages-plugin-0
ttps://patchstack.com/database/wordpress/plugin/admin-options-pages/vulnerability/wordpress-admin-options-pages-plugin-0-9-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23906 State: PUBLISHED Published: 2025-04-17T15:48:26.860Z Last Updated: 2025-04-17T18:15:25.691Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: wpseek Products: WordPress Dashboard Tweeter Problem Types: CWE-862 Description: Missing Authorization vulnerability in wpseek WordPress Dashboard Tweeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WordPress Dashboard Tweeter: from n/a through 1.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wordpress-dashboard-twitter/vulnerability/wordpress-wordpress-dashboard-tweeter-plugin-1-
.com/database/wordpress/plugin/wordpress-dashboard-twitter/vulnerability/wordpress-wordpress-dashboard-tweeter-plugin-1-3-2-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-23907 State: PUBLISHED Published: 2025-01-16T20:08:17.563Z Last Updated: 2025-01-16T20:36:14.184Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: closed Products: SOCIAL.NINJA Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in closed SOCIAL.NINJA allows Stored XSS. This issue affects SOCIAL.NINJA: from n/a through 0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/seo-meta/vulnerability/wordpress-social-ninja-plugin-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23908 State: PUBLISHED Published: 2025-01-16T20:07:47.728Z Last Updated: 2025-01-17T18:59:53.765Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Rami Yushuvaev Products: Pastebin Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rami Yushuvaev Pastebin allows Stored XSS.This issue affects Pastebin: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pastebin-embed/vulnerability/wordpress-pastebin-plugin-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23909 State: PUBLISHED Published: 2025-01-16T20:07:48.362Z Last Updated: 2025-01-17T18:59:41.076Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Common Ninja Products: Compare Ninja Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Common Ninja Compare Ninja allows Stored XSS.This issue affects Compare Ninja: from n/a through 2.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/compare-ninja-comparison-tables/vulnerability/wordpress-compare-ninja-plugin-2-1-0-cross-site-scripting-xss-vuln
/plugin/compare-ninja-comparison-tables/vulnerability/wordpress-compare-ninja-plugin-2-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-23910 State: PUBLISHED Published: 2025-01-22T14:29:23.164Z Last Updated: 2025-01-22T15:09:07.383Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: NotFound Products: Menus Plus+ Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Menus Plus+ allows SQL Injection. This issue affects Menus Plus+: from n/a through 1.9.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/menus-plus/vulnerability/wordpress-menus-plus-plugin-1-9-6-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-23911 State: PUBLISHED Published: 2025-01-16T20:07:48.967Z Last Updated: 2025-01-17T18:59:28.936Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Solidres Team Products: Solidres – Hotel booking plugin Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solidres Team Solidres – Hotel booking plugin allows SQL Injection.This issue affects Solidres – Hotel booking plugin: from n/a through 0.9.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/solidres/vulnerability/wordpress-solidres-hotel-booking
: References: - https://patchstack.com/database/wordpress/plugin/solidres/vulnerability/wordpress-solidres-hotel-booking-plugin-for-wordpress-plugin-0-9-4-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-23912 State: PUBLISHED Published: 2025-01-16T20:07:50.812Z Last Updated: 2025-01-17T18:58:19.743Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Typomedia Foundation Products: WordPress Custom Sidebar Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Typomedia Foundation WordPress Custom Sidebar allows Blind SQL Injection.This issue affects WordPress Custom Sidebar: from n/a through 2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wordpress-custom-sidebar/vulnerability/wordpress-wordpress
eferences: - https://patchstack.com/database/wordpress/plugin/wordpress-custom-sidebar/vulnerability/wordpress-wordpress-custom-sidebar-plugin-2-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-23913 State: PUBLISHED Published: 2025-01-16T20:07:49.596Z Last Updated: 2025-01-17T18:58:37.126Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: pankajpragma, rahulpragma Products: WordPress Google Map Professional Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in pankajpragma, rahulpragma WordPress Google Map Professional allows SQL Injection.This issue affects WordPress Google Map Professional: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/google-map-professional/vul
tes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/google-map-professional/vulnerability/wordpress-google-map-professional-plugin-1-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-23914 State: PUBLISHED Published: 2025-01-22T15:42:35.186Z Last Updated: 2025-01-22T19:44:23.188Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NotFound Products: Muzaara Google Ads Report Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in NotFound Muzaara Google Ads Report allows Object Injection. This issue affects Muzaara Google Ads Report: from n/a through 3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/muzaara-adwords-optimize-dashboard/vulnerability/wordpress-muzaara-google-ads-report-plugin-3-1-php-object-injection-vulnerabil
-adwords-optimize-dashboard/vulnerability/wordpress-muzaara-google-ads-report-plugin-3-1-php-object-injection-vulnerability?_s_id=cve