Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-52770 State: PUBLISHED Published: 2025-10-22T14:32:28.679Z Last Updated: 2025-11-13T10:33:42.088Z Vendors: appscreo Products: Hello Followers Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in appscreo Hello Followers hellofollowers allows Reflected XSS.This issue affects Hello Followers: from n/a through <= 2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/hellofollowers/vulnerability/wordpress-hello-followers-plugin-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52771 State: PUBLISHED Published: 2025-08-14T18:22:04.708Z Last Updated: 2025-08-14T20:08:18.337Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: bcupham Products: Video Expander Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bcupham Video Expander allows Stored XSS. This issue affects Video Expander: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/video-expander/vulnerability/wordpress-video-expander-plugin-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52772 State: PUBLISHED Published: 2025-06-20T15:03:46.238Z Last Updated: 2025-06-23T16:21:18.603Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Adnan Haque (a11n) Products: Virtual Moderator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Adnan Haque (a11n) Virtual Moderator allows Cross-Site Scripting (XSS). This issue affects Virtual Moderator: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/virtual-moderator/vulnerability/wordpress-virtual-moderator-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cv
al-moderator/vulnerability/wordpress-virtual-moderator-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52773 State: PUBLISHED Published: 2025-11-06T15:53:57.496Z Last Updated: 2025-11-13T10:33:42.073Z Vendors: hiecor Products: HieCOR Payment Gateway Plugin Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in hiecor HieCOR Payment Gateway Plugin hcv4-payment-gateway allows SQL Injection.This issue affects HieCOR Payment Gateway Plugin: from n/a through <= 1.5.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/hcv4-payment-gateway/vulnerability/wordpress-hiecor-payment-gateway-plugin-plugin-1-5-11-sql-injection-vulnerability?
in/hcv4-payment-gateway/vulnerability/wordpress-hiecor-payment-gateway-plugin-plugin-1-5-11-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52774 State: PUBLISHED Published: 2025-06-27T11:52:23.846Z Last Updated: 2025-06-27T13:07:32.895Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Infility Products: Infility Global Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infility Infility Global allows Reflected XSS. This issue affects Infility Global: from n/a through 2.12.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/infility-global/vulnerability/wordpress-infility-global-2-12-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52775 State: PUBLISHED Published: 2025-08-14T10:34:00.145Z Last Updated: 2025-08-14T14:47:42.697Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: Ronik@UnlimitedWP Products: Project Cost Calculator Problem Types: CWE-862 Description: Missing Authorization vulnerability in Ronik@UnlimitedWP Project Cost Calculator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Project Cost Calculator: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/project-cost-calculator/vulnerability/wordpress-project-cost-calculator-plugin-1-
tchstack.com/database/wordpress/plugin/project-cost-calculator/vulnerability/wordpress-project-cost-calculator-plugin-1-0-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-52776 State: PUBLISHED Published: 2025-07-04T11:17:56.485Z Last Updated: 2025-07-07T16:25:56.466Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: thanhtungtnt Products: Video List Manager Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thanhtungtnt Video List Manager allows Stored XSS. This issue affects Video List Manager: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/video-list-manager/vulnerability/wordpress-video-list-manager-1-7-cross-site-scripting-xss-vulnerabi
se/wordpress/plugin/video-list-manager/vulnerability/wordpress-video-list-manager-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52777 State: PUBLISHED Published: 2025-07-16T11:27:56.274Z Last Updated: 2025-07-16T20:21:13.281Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: cmsMinds Products: Pay with Contact Form 7 Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cmsMinds Pay with Contact Form 7 allows Reflected XSS. This issue affects Pay with Contact Form 7: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pay-with-contact-form-7/vulnerability/wordpress-pay-with-contact-form-7-1-0-4-cross-site
k.com/database/wordpress/plugin/pay-with-contact-form-7/vulnerability/wordpress-pay-with-contact-form-7-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52778 State: PUBLISHED Published: 2025-06-27T11:52:23.269Z Last Updated: 2025-06-27T13:07:51.266Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Michel - xiligroup dev Products: xili-dictionary Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michel - xiligroup dev xili-dictionary allows Reflected XSS. This issue affects xili-dictionary: from n/a through 2.12.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/xili-dictionary/vulnerability/wordpress-xili-dictionary-2-12-5-2-cross-site-scrip
tchstack.com/database/wordpress/plugin/xili-dictionary/vulnerability/wordpress-xili-dictionary-2-12-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52779 State: PUBLISHED Published: 2025-07-16T11:27:55.807Z Last Updated: 2025-07-16T20:20:42.413Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: karimmughal Products: Dot html,php,xml etc pages Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in karimmughal Dot html,php,xml etc pages allows Reflected XSS. This issue affects Dot html,php,xml etc pages: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dot-htmlphpxml-etc-pages/vulnerability/wordpress-dot-html-php-xml-etc-pages
s://patchstack.com/database/wordpress/plugin/dot-htmlphpxml-etc-pages/vulnerability/wordpress-dot-html-php-xml-etc-pages-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52780 State: PUBLISHED Published: 2025-06-20T15:03:45.765Z Last Updated: 2025-06-23T16:21:23.980Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Mohammad Parsa Products: Logo Manager For Samandehi Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mohammad Parsa Logo Manager For Samandehi allows Stored XSS. This issue affects Logo Manager For Samandehi: from n/a through 0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/samandehi-logo-manager/vulnerability/wordpress-logo-manager-for-samandehi-plugin-0-5-cross-site-request-forgery-csrf-vulne
mandehi-logo-manager/vulnerability/wordpress-logo-manager-for-samandehi-plugin-0-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52781 State: PUBLISHED Published: 2025-06-20T15:03:45.299Z Last Updated: 2025-06-23T16:21:29.799Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Beee Products: TinyNav Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Beee TinyNav allows Stored XSS. This issue affects TinyNav: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/tinynav/vulnerability/wordpress-tinynav-plugin-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52782 State: PUBLISHED Published: 2025-06-20T15:03:44.629Z Last Updated: 2025-06-23T16:21:35.323Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: King Rayhan Products: Scroll UP Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in King Rayhan Scroll UP allows Reflected XSS. This issue affects Scroll UP: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/scroll-to-up/vulnerability/wordpress-scroll-up-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52783 State: PUBLISHED Published: 2025-06-20T15:03:44.014Z Last Updated: 2025-06-23T15:52:52.919Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: themelocation Products: Change Cart button Colors WooCommerce Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in themelocation Change Cart button Colors WooCommerce allows Stored XSS. This issue affects Change Cart button Colors WooCommerce: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wc-style/vulnerability/wordpress-change-cart-button-colors-woocommerce-plugin-1-0-cross-sit
om/database/wordpress/plugin/wc-style/vulnerability/wordpress-change-cart-button-colors-woocommerce-plugin-1-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52784 State: PUBLISHED Published: 2025-06-20T15:03:43.552Z Last Updated: 2025-06-23T16:21:41.089Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: hideoguchi Products: Bluff Post Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in hideoguchi Bluff Post allows Stored XSS. This issue affects Bluff Post: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bluff-post/vulnerability/wordpress-bluff-post-plugin-1-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52785 State: PUBLISHED Published: 2025-08-14T10:33:59.436Z Last Updated: 2025-08-14T14:47:49.211Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: softnwords Products: SMM API Problem Types: CWE-862 Description: Missing Authorization vulnerability in softnwords SMM API allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SMM API: from n/a through 6.0.30. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smm-api/vulnerability/wordpress-smm-api-plugin-6-0-30-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-52786 State: PUBLISHED Published: 2025-07-16T11:27:55.315Z Last Updated: 2025-07-16T20:20:09.551Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Kingdom Creation Products: Media Folder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kingdom Creation Media Folder allows Reflected XSS. This issue affects Media Folder: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/media-folder/vulnerability/wordpress-media-folder-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52787 State: PUBLISHED Published: 2025-07-16T11:27:54.842Z Last Updated: 2025-07-16T14:15:23.239Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: EZiHosting Products: Tennis Court Bookings Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EZiHosting Tennis Court Bookings allows Reflected XSS. This issue affects Tennis Court Bookings: from n/a through 1.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/tennis-court-bookings/vulnerability/wordpress-tennis-court-bookings-1-2-7-cross-site-scrip
com/database/wordpress/plugin/tennis-court-bookings/vulnerability/wordpress-tennis-court-bookings-1-2-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52788 State: PUBLISHED Published: 2025-08-14T10:33:58.848Z Last Updated: 2025-08-14T14:47:55.140Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Russell Jamieson Products: CaptionPix Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Russell Jamieson CaptionPix allows Reflected XSS. This issue affects CaptionPix: from n/a through 1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/captionpix/vulnerability/wordpress-captionpix-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52789 State: PUBLISHED Published: 2025-06-20T15:03:43.083Z Last Updated: 2025-06-23T16:21:46.751Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: George Lewe Products: Lewe ChordPress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in George Lewe Lewe ChordPress allows Stored XSS. This issue affects Lewe ChordPress: from n/a through 3.9.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/chordpress/vulnerability/wordpress-lewe-chordpress-plugin-3-9-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52790 State: PUBLISHED Published: 2025-06-20T15:03:42.584Z Last Updated: 2025-06-23T16:21:52.324Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: r-win Products: WP-DownloadCounter Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in r-win WP-DownloadCounter allows Stored XSS. This issue affects WP-DownloadCounter: from n/a through 1.01. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-downloadcounter/vulnerability/wordpress-wp-downloadcounter-plugin-1-01-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52791 State: PUBLISHED Published: 2025-06-20T15:03:42.082Z Last Updated: 2025-06-23T16:21:57.496Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: devfelixmoira Products: Knowledge Base &#8211; Knowledge Base Maker Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in devfelixmoira Knowledge Base &#8211; Knowledge Base Maker allows Stored XSS. This issue affects Knowledge Base &#8211; Knowledge Base Maker: from n/a through 1.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/knowledge-base-maker/vulnerability/wordpress-knowledge-base-knowledge-b
https://patchstack.com/database/wordpress/plugin/knowledge-base-maker/vulnerability/wordpress-knowledge-base-knowledge-base-maker-plugin-1-1-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52792 State: PUBLISHED Published: 2025-06-20T15:03:41.587Z Last Updated: 2025-06-23T16:22:04.293Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: vgstef Products: WP User Stylesheet Switcher Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in vgstef WP User Stylesheet Switcher allows Stored XSS. This issue affects WP User Stylesheet Switcher: from n/a through v2.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-user-stylesheet-switcher/vulnerability/wordpress-wp-user-stylesheet-switcher-plugin-v2-2-0-cross-site-request-forgery-csrf-vulner
esheet-switcher/vulnerability/wordpress-wp-user-stylesheet-switcher-plugin-v2-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52793 State: PUBLISHED Published: 2025-06-20T15:03:41.126Z Last Updated: 2025-06-23T16:22:10.180Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Esselink.nu Products: Esselink.nu Settings Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Esselink.nu Esselink.nu Settings allows Reflected XSS. This issue affects Esselink.nu Settings: from n/a through 2.94. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/esselinknu-settings/vulnerability/wordpress-esselink-nu-settings-plugin-2-94-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52794 State: PUBLISHED Published: 2025-06-20T15:03:40.653Z Last Updated: 2025-06-23T16:22:16.086Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Creative-Solutions Products: Creative Contact Form Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Creative-Solutions Creative Contact Form allows Stored XSS. This issue affects Creative Contact Form: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sexy-contact-form/vulnerability/wordpress-creative-contact-form-plugin-1-0-0-cross-site-request-forgery-csrf-vulnerability?_s_i
ntact-form/vulnerability/wordpress-creative-contact-form-plugin-1-0-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52795 State: PUBLISHED Published: 2025-06-20T15:03:40.191Z Last Updated: 2025-06-23T16:22:21.417Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H) Vendors: aharonyan Products: WP Front User Submit / Front Editor Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in aharonyan WP Front User Submit / Front Editor allows Cross Site Request Forgery. This issue affects WP Front User Submit / Front Editor: from n/a through 4.9.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/front-editor/vulnerability/wordpress-wp-front-user-submit-front-editor-plugin-4-9-4-cro
ck.com/database/wordpress/plugin/front-editor/vulnerability/wordpress-wp-front-user-submit-front-editor-plugin-4-9-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52796 State: PUBLISHED Published: 2025-07-04T11:17:55.974Z Last Updated: 2025-07-07T16:26:13.910Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: tggfref Products: WP-Recall Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tggfref WP-Recall allows Reflected XSS. This issue affects WP-Recall: from n/a through 16.26.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-recall/vulnerability/wordpress-wp-recall-16-26-14-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52797 State: PUBLISHED Published: 2025-08-14T18:22:04.151Z Last Updated: 2025-08-14T20:07:58.631Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L) Vendors: josepsitjar Products: StoryMap Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in josepsitjar StoryMap allows SQL Injection. This issue affects StoryMap: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-storymap/vulnerability/wordpress-storymap-plugin-plugin-2-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52798 State: PUBLISHED Published: 2025-07-04T11:17:55.451Z Last Updated: 2025-07-07T16:26:30.898Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: eyecix Products: JobSearch Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eyecix JobSearch allows Reflected XSS. This issue affects JobSearch: from n/a through 2.9.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-jobsearch/vulnerability/wordpress-jobsearch-2-9-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52799 State: PUBLISHED Published: 2025-06-27T11:52:22.671Z Last Updated: 2025-06-27T13:08:20.551Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: designthemes Products: LMS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes LMS allows Reflected XSS. This issue affects LMS: from n/a through 9.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/lms/vulnerability/wordpress-lms-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52800 State: PUBLISHED Published: 2025-08-14T10:33:58.298Z Last Updated: 2025-08-14T14:48:03.668Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Unity Business Technology Pty Ltd Products: The E-Commerce ERP Problem Types: CWE-862 Description: Missing Authorization vulnerability in Unity Business Technology Pty Ltd The E-Commerce ERP allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects The E-Commerce ERP: from n/a through 2.1.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/profitori/vulnerability/wordpress-the-e-commerce-erp-2-1-1-3-broken-ac
https://patchstack.com/database/wordpress/plugin/profitori/vulnerability/wordpress-the-e-commerce-erp-2-1-1-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-52801 State: PUBLISHED Published: 2025-08-14T10:33:57.635Z Last Updated: 2025-08-14T14:48:12.017Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: VonStroheim Products: TheBooking Problem Types: CWE-862 Description: Missing Authorization vulnerability in VonStroheim TheBooking allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects TheBooking: from n/a through 1.4.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/thebooking/vulnerability/wordpress-thebooking-plugin-1-4-4-broken-access-control-vulnerability?_s_id=cve