Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-49923 State: PUBLISHED Published: 2025-10-22T14:32:13.596Z Last Updated: 2025-11-13T16:28:21.953Z Vendors: Craig Hewitt Products: Seriously Simple Podcasting Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOM-Based XSS.This issue affects Seriously Simple Podcasting: from n/a through <= 3.11.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/seriously-simple-podcasting/vulnerability/wordpress-seriously-simple-podcasting-plugin-3-11-1-cross-site
ordpress/Plugin/seriously-simple-podcasting/vulnerability/wordpress-seriously-simple-podcasting-plugin-3-11-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49924 State: PUBLISHED Published: 2025-10-22T14:32:13.804Z Last Updated: 2025-11-13T16:28:37.297Z Vendors: Josh Kohlbach Products: Wholesale Suite Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite woocommerce-wholesale-prices allows Privilege Escalation.This issue affects Wholesale Suite: from n/a through <= 2.2.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/woocommerce-wholesale-prices/vulnerability/wordpress-wholesale-suite-plugin-2-2-4-2-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-49925 State: PUBLISHED Published: 2025-10-22T14:32:14.033Z Last Updated: 2025-11-13T16:28:57.727Z Vendors: VibeThemes Products: WPLMS Problem Types: CWE-862 Description: Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1.9.9.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wplms_plugin/vulnerability/wordpress-wplms-plugin-1-9-9-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49926 State: PUBLISHED Published: 2025-10-22T14:32:14.208Z Last Updated: 2025-11-13T16:29:22.736Z Vendors: Laborator Products: Kalium Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Laborator Kalium kalium allows Code Injection.This issue affects Kalium: from n/a through <= 3.25. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/kalium/vulnerability/wordpress-kalium-theme-3-25-arbitrary-code-execution-vulnerability?_s_id=cve
CVE ID: CVE-2025-49927 State: PUBLISHED Published: 2025-10-22T14:32:14.395Z Last Updated: 2025-11-13T16:30:02.431Z Vendors: CrocoBlock Products: JetWooBuilder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetWooBuilder jet-woo-builder allows Stored XSS.This issue affects JetWooBuilder: from n/a through <= 2.1.20.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/jet-woo-builder/vulnerability/wordpress-jetwoobuilder-plugin-2-1-20-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49928 State: PUBLISHED Published: 2025-10-22T14:32:14.597Z Last Updated: 2025-11-13T16:30:41.529Z Vendors: CrocoBlock Products: JetWooBuilder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetWooBuilder jet-woo-builder allows DOM-Based XSS.This issue affects JetWooBuilder: from n/a through <= 2.1.20. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/jet-woo-builder/vulnerability/wordpress-jetwoobuilder-plugin-2-1-20-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49929 State: PUBLISHED Published: 2025-10-22T14:32:14.811Z Last Updated: 2025-11-13T16:31:09.169Z Vendors: Ultimate Blocks Products: Ultimate Blocks Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ultimate Blocks Ultimate Blocks ultimate-blocks allows Stored XSS.This issue affects Ultimate Blocks: from n/a through <= 3.3.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/ultimate-blocks/vulnerability/wordpress-ultimate-blocks-plugin-3-3-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49930 State: PUBLISHED Published: 2025-10-22T14:32:15.035Z Last Updated: 2025-11-13T16:31:25.874Z Vendors: CrocoBlock Products: JetSearch Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetSearch jet-search allows Reflected XSS.This issue affects JetSearch: from n/a through <= 3.5.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/jet-search/vulnerability/wordpress-jetsearch-plugin-3-5-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49931 State: PUBLISHED Published: 2025-10-22T14:32:15.259Z Last Updated: 2025-11-13T16:32:02.851Z Vendors: CrocoBlock Products: JetSearch Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CrocoBlock JetSearch jet-search allows Blind SQL Injection.This issue affects JetSearch: from n/a through <= 3.5.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/jet-search/vulnerability/wordpress-jetsearch-plugin-3-5-10-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-49932 State: PUBLISHED Published: 2025-10-22T14:32:15.443Z Last Updated: 2025-11-13T16:32:44.597Z Vendors: CrocoBlock Products: JetBlog Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetBlog jet-blog allows Stored XSS.This issue affects JetBlog: from n/a through <= 2.4.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/jet-blog/vulnerability/wordpress-jetblog-plugin-2-4-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49933 State: PUBLISHED Published: 2025-10-22T14:32:15.603Z Last Updated: 2025-11-13T16:32:57.936Z Vendors: CrocoBlock Products: JetBlog Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through <= 2.4.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/jet-blog/vulnerability/wordpress-jetblog-plugin-2-4-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49934 State: PUBLISHED Published: 2025-10-22T14:32:15.865Z Last Updated: 2025-11-13T10:33:41.396Z Vendors: CrocoBlock Products: JetBlocks For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetBlocks For Elementor jet-blocks allows Stored XSS.This issue affects JetBlocks For Elementor: from n/a through <= 1.3.18. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/jet-blocks/vulnerability/wordpress-jetblocks-for-elementor-plugin-1-3-18-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49935 State: PUBLISHED Published: 2025-10-22T14:32:16.098Z Last Updated: 2025-11-13T16:33:15.559Z Vendors: xtemos Products: WoodMart Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in xtemos WoodMart woodmart allows PHP Local File Inclusion.This issue affects WoodMart: from n/a through < 8.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/woodmart/vulnerability/wordpress-woodmart-theme-8-3-2-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49936 State: PUBLISHED Published: 2025-10-22T14:32:16.302Z Last Updated: 2025-11-13T16:33:27.954Z Vendors: xtemos Products: WoodMart Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xtemos WoodMart woodmart allows DOM-Based XSS.This issue affects WoodMart: from n/a through < 8.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/woodmart/vulnerability/wordpress-woodmart-theme-8-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49937 State: PUBLISHED Published: 2025-10-22T14:32:16.676Z Last Updated: 2025-11-13T10:33:41.564Z Vendors: Syed Balkhi Products: Smash Balloon Social Post Feed Problem Types: CWE-862 Description: Missing Authorization vulnerability in Syed Balkhi Smash Balloon Social Post Feed custom-facebook-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smash Balloon Social Post Feed: from n/a through <= 4.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/custom-facebook-feed/vulnerability/wordpress-smash-balloon-social-post-feed-plugin-4-3-2-broken-access-control-vulne
gin/custom-facebook-feed/vulnerability/wordpress-smash-balloon-social-post-feed-plugin-4-3-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49938 State: PUBLISHED Published: 2025-10-22T14:32:16.875Z Last Updated: 2025-11-13T16:33:40.786Z Vendors: CrocoBlock Products: JetEngine Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetEngine jet-engine allows Stored XSS.This issue affects JetEngine: from n/a through <= 3.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/jet-engine/vulnerability/wordpress-jetengine-plugin-3-7-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49939 State: PUBLISHED Published: 2025-10-22T14:32:17.061Z Last Updated: 2025-11-13T16:33:56.266Z Vendors: CrocoBlock Products: JetElements For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrocoBlock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through <= 2.7.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/jet-elements/vulnerability/wordpress-jetelements-for-elementor-plugin-2-7-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49940 State: PUBLISHED Published: 2025-10-22T14:32:17.247Z Last Updated: 2025-11-13T16:34:10.586Z Vendors: ThemeFusion Products: Fusion Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows DOM-Based XSS.This issue affects Fusion Builder: from n/a through <= 3.13.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/fusion-builder/vulnerability/wordpress-fusion-builder-plugin-3-13-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49944 State: PUBLISHED Published: 2025-10-22T14:32:17.445Z Last Updated: 2025-11-13T16:35:17.263Z Vendors: Jonatan Jumbert Products: WPCode Content Ratio Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jonatan Jumbert WPCode Content Ratio wpcode-content-ratio allows Reflected XSS.This issue affects WPCode Content Ratio: from n/a through <= 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wpcode-content-ratio/vulnerability/wordpress-wpcode-content-ratio-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49945 State: PUBLISHED Published: 2025-10-22T14:32:17.676Z Last Updated: 2025-11-13T16:35:29.204Z Vendors: kylegetson Products: Shortcode Generator Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kylegetson Shortcode Generator shortcode-generator allows Reflected XSS.This issue affects Shortcode Generator: from n/a through <= 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/shortcode-generator/vulnerability/wordpress-shortcode-generator-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49946 State: PUBLISHED Published: 2025-10-22T14:32:17.913Z Last Updated: 2025-11-13T16:35:42.581Z Vendors: Cynob IT Consultancy Products: Auto Login After Registration Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cynob IT Consultancy Auto Login After Registration auto-login-after-registration allows Reflected XSS.This issue affects Auto Login After Registration: from n/a through <= 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/auto-login-after-registration/vulnerability/wordpress-auto-login-after-registrati
tchstack.com/database/Wordpress/Plugin/auto-login-after-registration/vulnerability/wordpress-auto-login-after-registration-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49947 State: PUBLISHED Published: 2025-10-22T14:32:18.131Z Last Updated: 2025-11-13T16:35:54.154Z Vendors: extendons Products: WooCommerce Registration Fields Plugin - Custom Signup Fields Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in extendons WooCommerce Registration Fields Plugin - Custom Signup Fields extendons-registration-fields allows Reflected XSS.This issue affects WooCommerce Registration Fields Plugin - Custom Signup Fields: from n/a through <= 3.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/extendo
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/extendons-registration-fields/vulnerability/wordpress-woocommerce-registration-fields-plugin-custom-signup-fields-plugin-3-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49948 State: PUBLISHED Published: 2025-10-22T14:32:18.319Z Last Updated: 2025-11-13T16:36:06.735Z Vendors: Ahmad Awais Products: WP Super Edit Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad Awais WP Super Edit wp-super-edit allows Reflected XSS.This issue affects WP Super Edit: from n/a through <= 2.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-super-edit/vulnerability/wordpress-wp-super-edit-plugin-2-5-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49949 State: PUBLISHED Published: 2025-10-22T14:32:18.660Z Last Updated: 2025-11-13T19:14:26.439Z Vendors: templazee Products: Templazee Problem Types: CWE-862 Description: Missing Authorization vulnerability in templazee Templazee templazee allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Templazee: from n/a through <= 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/templazee/vulnerability/wordpress-templazee-plugin-1-0-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49950 State: PUBLISHED Published: 2025-10-22T14:32:18.932Z Last Updated: 2025-11-13T19:14:42.947Z Vendors: billingo Products: Official Integration for Billingo Problem Types: CWE-862 Description: Missing Authorization vulnerability in billingo Official Integration for Billingo billingo allows Privilege Escalation.This issue affects Official Integration for Billingo: from n/a through <= 4.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/billingo/vulnerability/wordpress-official-integration-for-billingo-plugin-4-2-5-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-49951 State: PUBLISHED Published: 2025-10-22T14:32:19.132Z Last Updated: 2025-11-13T19:15:00.844Z Vendors: wpcrunch Products: gAppointments Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpcrunch gAppointments gAppointments allows Reflected XSS.This issue affects gAppointments: from n/a through <= 1.14.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/gAppointments/vulnerability/wordpress-gappointments-plugin-1-14-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49952 State: PUBLISHED Published: 2025-10-22T14:32:19.320Z Last Updated: 2025-11-13T19:15:54.186Z Vendors: favethemes Products: Houzez Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in favethemes Houzez houzez allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Houzez: from n/a through <= 4.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Theme/houzez/vulnerability/wordpress-houzez-theme-4-1-1-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE ID: CVE-2025-49953 State: PUBLISHED Published: 2025-10-22T14:32:19.616Z Last Updated: 2025-11-13T10:33:41.542Z Vendors: themeinity Products: ShareBang, Ultimate Social Share Buttons for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeinity ShareBang, Ultimate Social Share Buttons for WordPress sharebang allows Reflected XSS.This issue affects ShareBang, Ultimate Social Share Buttons for WordPress: from n/a through <= 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/sharebang/vulnerability/wordpress-sharebang-ulti
ent: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/sharebang/vulnerability/wordpress-sharebang-ultimate-social-share-buttons-for-wordpress-plugin-1-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49954 State: PUBLISHED Published: 2025-10-22T14:32:19.827Z Last Updated: 2025-11-13T10:33:41.491Z Vendors: mithra62 Products: WP-Click-Tracker Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mithra62 WP-Click-Tracker wp-click-track allows Reflected XSS.This issue affects WP-Click-Tracker: from n/a through <= 0.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-click-track/vulnerability/wordpress-wp-click-tracker-plugin-0-7-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49955 State: PUBLISHED Published: 2025-10-22T14:32:20.010Z Last Updated: 2025-11-13T19:16:11.144Z Vendors: Rajan Vijayan Products: WP Smart Flexslider Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rajan Vijayan WP Smart Flexslider wp-smart-flexslider allows Reflected XSS.This issue affects WP Smart Flexslider: from n/a through <= 2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wp-smart-flexslider/vulnerability/wordpress-wp-smart-flexslider-plugin-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49956 State: PUBLISHED Published: 2025-10-22T14:32:20.199Z Last Updated: 2025-11-13T19:16:23.692Z Vendors: Anandaraj Balu Products: Fade Slider Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anandaraj Balu Fade Slider fade-slider allows Reflected XSS.This issue affects Fade Slider: from n/a through <= 2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/fade-slider/vulnerability/wordpress-fade-slider-plugin-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49957 State: PUBLISHED Published: 2025-10-22T14:32:20.403Z Last Updated: 2025-11-13T10:33:41.665Z Vendors: Weboccult Technologies Pvt Ltd Products: Email Attachment by Order Status &amp; Products Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Weboccult Technologies Pvt Ltd Email Attachment by Order Status &amp; Products email-attachment-by-order-status-products allows Reflected XSS.This issue affects Email Attachment by Order Status &amp; Products: from n/a through <= 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Pl
1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/email-attachment-by-order-status-products/vulnerability/wordpress-email-attachment-by-order-status-products-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49958 State: PUBLISHED Published: 2025-10-22T14:32:20.661Z Last Updated: 2025-11-13T10:33:41.655Z Vendors: robokassa Products: Robokassa payment gateway for Woocommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in robokassa Robokassa payment gateway for Woocommerce robokassa allows Reflected XSS.This issue affects Robokassa payment gateway for Woocommerce: from n/a through <= 1.8.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/robokassa/vulnerability/wordpress-robokassa-payment-gateway-for-woocommerce-plugin-1-7-
ck.com/database/Wordpress/Plugin/robokassa/vulnerability/wordpress-robokassa-payment-gateway-for-woocommerce-plugin-1-7-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49959 State: PUBLISHED Published: 2025-10-22T14:32:20.965Z Last Updated: 2025-11-13T10:33:41.739Z Vendors: Pascal Casier Products: bbPress Move Topics Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pascal Casier bbPress Move Topics bbp-move-topics allows Reflected XSS.This issue affects bbPress Move Topics: from n/a through <= 1.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/bbp-move-topics/vulnerability/wordpress-bbpress-move-topics-plugin-1-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49960 State: PUBLISHED Published: 2025-10-22T14:32:21.173Z Last Updated: 2025-11-13T10:33:41.767Z Vendors: leadbi Products: LeadBI Plugin for WordPress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in leadbi LeadBI Plugin for WordPress leadbi allows Stored XSS.This issue affects LeadBI Plugin for WordPress: from n/a through <= 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/leadbi/vulnerability/wordpress-leadbi-plugin-for-wordpress-plugin-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve