Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-52664 State: PUBLISHED Published: 2025-10-30T23:29:22.906Z Last Updated: 2025-11-03T17:44:56.120Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/CR:X/IR:X/AR:X) Vendors: Revive Products: Revive Adserver Description: SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted payloads are sent by logged in users Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://hackerone.com/reports/3395221
CVE ID: CVE-2025-52665 State: PUBLISHED Published: 2025-10-30T23:30:28.329Z Last Updated: 2025-10-31T14:07:27.850Z Vendors: Ubiquiti Inc Products: UniFi Access Application Description: A malicious actor with access to the management network could exploit a misconfiguration in UniFi’s door access application, UniFi Access, that exposed a management API without proper authentication. This vulnerability was introduced in Version 3.3.22 and was fixed in Version 4.0.21 and later. Affected Products: UniFi Access Application (Version 3.3.22 through 3.4.31). Mitigation: Update your UniFi Access Application to Version 4.0.21 or later. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
UniFi Access Application to Version 4.0.21 or later. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-056/ce97352d-91cd-40a7-a2f4-2c73b3b30191
CVE ID: CVE-2025-52666 State: PUBLISHED Published: 2025-11-20T19:10:15.725Z Last Updated: 2025-11-20T21:42:35.261Z Severity: LOW (CVSS 2.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: Revive Products: Revive Adserver Description: Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administrator user to disable the admin user console due to a fatal PHP error. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/3399218
CVE ID: CVE-2025-52667 State: PUBLISHED Published: 2025-11-20T19:10:15.360Z Last Updated: 2025-11-20T20:56:25.619Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Revive Products: Revive Adserver Description: Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XSS attack to be possible for a logged in manager user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/3399809
CVE ID: CVE-2025-52668 State: PUBLISHED Published: 2025-11-20T19:11:36.482Z Last Updated: 2025-11-20T21:33:11.324Z Severity: HIGH (CVSS 8.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Revive Products: Revive Adserver Description: Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijacking via a stored XSS attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/3400506
CVE ID: CVE-2025-52669 State: PUBLISHED Published: 2025-11-20T19:10:15.642Z Last Updated: 2025-11-20T21:43:25.996Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Revive Products: Revive Adserver Description: Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to have access to the contact name and email address of other users on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/3401464
CVE ID: CVE-2025-52670 State: PUBLISHED Published: 2025-11-20T19:10:15.391Z Last Updated: 2025-11-20T21:01:42.839Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L) Vendors: Revive Products: Revive Adserver Description: Missing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users on the system to delete banners owned by other accounts Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/3401612
CVE ID: CVE-2025-52671 State: PUBLISHED Published: 2025-11-20T19:10:15.756Z Last Updated: 2025-11-20T21:41:36.636Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Revive Products: Revive Adserver Description: Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hackerone.com/reports/3403450
CVE ID: CVE-2025-52687 State: PUBLISHED Published: 2025-07-16T06:15:05.328Z Last Updated: 2025-07-16T14:41:09.909Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: Alcatel-Lucent Products: OmniAccess Stellar Problem Types: CWE-77 Description: Successful exploitation of the vulnerability could allow an attacker with administrator credentials for the access point to inject malicious JavaScript into the payload of web traffics, potentially leading to session hijacking and denial-of-service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-072/ - https://www.al-enterprise.com/-/media/a
References: - https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-072/ - https://www.al-enterprise.com/-/media/assets/internet/documents/sa-n0150-omniaccess-stellar-multiple-vulnerabilities.pdf
CVE ID: CVE-2025-52688 State: PUBLISHED Published: 2025-07-16T06:23:53.933Z Last Updated: 2025-07-16T14:41:04.579Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Alcatel-Lucent Products: OmniAccess Stellar Products Problem Types: CWE-77 Description: Successful exploitation of the vulnerability could allow an attacker to inject commands with root privileges on the access point, potentially leading to the loss of confidentiality, integrity, availability, and full control of the access point. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-072/ - https://www.al-enterprise.com/-/medi
t: References: - https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-072/ - https://www.al-enterprise.com/-/media/assets/internet/documents/sa-n0150-omniaccess-stellar-multiple-vulnerabilities.pdf - https://jro.sg/CVEs/CVE-2025-52688/
CVE ID: CVE-2025-52689 State: PUBLISHED Published: 2025-07-16T06:30:11.161Z Last Updated: 2025-07-16T14:40:58.689Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Alcatel-Lucent Products: OmniAccess Stellar Products Problem Types: CWE-384 Description: Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-072/ - https://www.al-enterprise.
ulnrichment: References: - https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-072/ - https://www.al-enterprise.com/-/media/assets/internet/documents/sa-n0150-omniaccess-stellar-multiple-vulnerabilities.pdf - https://blog.uhg.sg/article/24.html
CVE ID: CVE-2025-52690 State: PUBLISHED Published: 2025-07-16T06:34:02.704Z Last Updated: 2025-07-16T14:40:53.098Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Alcatel-Lucent Products: OmniAccess Stellar Products Problem Types: CWE-77 Description: Successful exploitation of the vulnerability could allow an attacker to execute arbitrary commands as root, potentially leading to the loss of confidentiality, integrity, availability, and full control of the access point. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-072/ - https://www.al-enterprise.com/-/media/assets/internet/document
ww.csa.gov.sg/alerts-and-advisories/alerts/al-2025-072/ - https://www.al-enterprise.com/-/media/assets/internet/documents/sa-n0150-omniaccess-stellar-multiple-vulnerabilities.pdf - https://jro.sg/CVEs/CVE-2025-52690/
CVE ID: CVE-2025-52707 State: PUBLISHED Published: 2025-06-20T15:03:34.270Z Last Updated: 2025-06-23T16:23:31.596Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: FirelightWP Products: Firelight Lightbox Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FirelightWP Firelight Lightbox allows Stored XSS. This issue affects Firelight Lightbox: from n/a through 2.3.16. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/easy-fancybox/vulnerability/wordpress-firelight-lightbox-plugin-2-3-16-cross-site-scripting-xss-v
abase/wordpress/plugin/easy-fancybox/vulnerability/wordpress-firelight-lightbox-plugin-2-3-16-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52708 State: PUBLISHED Published: 2025-06-20T15:03:34.933Z Last Updated: 2025-06-23T16:23:25.773Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: RealMag777 Products: HUSKY Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RealMag777 HUSKY allows PHP Local File Inclusion. This issue affects HUSKY: from n/a through 1.3.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/woocommerce-products-filter/vulnerability/wordpress-husky-plugin-1-3-7-local-file-inclusion-vulnerability?_s
ress/plugin/woocommerce-products-filter/vulnerability/wordpress-husky-plugin-1-3-7-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52709 State: REJECTED Published: 2025-06-27T11:52:29.065Z Last Updated: 2025-09-04T02:49:16.748Z Description: No description available.
CVE ID: CVE-2025-52710 State: PUBLISHED Published: 2025-06-20T15:03:35.411Z Last Updated: 2025-06-23T16:23:19.684Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Ninja Team Products: File Manager Pro Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ninja Team File Manager Pro allows Stored XSS. This issue affects File Manager Pro: from n/a through 1.8.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/filester/vulnerability/wordpress-file-manager-pro-plugin-1-8-8-cross-site-scripting-xss-vulnerability?_s_i
dpress/plugin/filester/vulnerability/wordpress-file-manager-pro-plugin-1-8-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-52711 State: PUBLISHED Published: 2025-06-20T15:03:35.880Z Last Updated: 2025-07-03T12:15:30.184Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: BoldGrid Products: Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor allows Cross Site Request Forgery.This issue affects Post and Page Builder by BoldGrid – Visual Drag and Drop Editor: from n/a through 1.27.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pos
8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/post-and-page-builder/vulnerability/wordpress-post-and-page-builder-by-boldgrid-visual-drag-and-drop-editor-plugin-1-27-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52712 State: PUBLISHED Published: 2025-08-14T10:34:04.649Z Last Updated: 2025-08-14T15:54:57.992Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: BoldGrid Products: Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Problem Types: CWE-35 Description: Path Traversal vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor allows Path Traversal. This issue affects Post and Page Builder by BoldGrid – Visual Drag and Drop Editor: from n/a through 1.27.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/post-and-page-builder/vulnerabilit
CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/post-and-page-builder/vulnerability/wordpress-post-and-page-builder-by-boldgrid-visual-drag-and-drop-editor-1-27-8-path-traversal-vulnerability?_s_id=cve
CVE ID: CVE-2025-52713 State: PUBLISHED Published: 2025-06-20T15:03:36.364Z Last Updated: 2025-06-23T16:23:08.597Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: BoldGrid Products: Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor allows Server Side Request Forgery. This issue affects Post and Page Builder by BoldGrid – Visual Drag and Drop Editor: from n/a through 1.27.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/
27.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/post-and-page-builder/vulnerability/wordpress-post-and-page-builder-by-boldgrid-visual-drag-and-drop-editor-plugin-1-27-8-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-52714 State: PUBLISHED Published: 2025-07-16T11:27:56.743Z Last Updated: 2025-07-16T20:21:55.951Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: shinetheme Products: Traveler Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shinetheme Traveler allows SQL Injection. This issue affects Traveler: from n/a through n/a. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/traveler/vulnerability/wordpress-traveler-3-2-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52715 State: PUBLISHED Published: 2025-06-20T15:03:36.841Z Last Updated: 2025-06-23T16:23:02.731Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: RadiusTheme Products: Classified Listing Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Classified Listing allows PHP Local File Inclusion. This issue affects Classified Listing: from n/a through 4.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/classified-listing/vulnerability/wordpress-classified-listing-plugi
: - https://patchstack.com/database/wordpress/plugin/classified-listing/vulnerability/wordpress-classified-listing-plugin-4-2-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52716 State: PUBLISHED Published: 2025-08-14T10:34:04.110Z Last Updated: 2025-08-14T14:43:56.555Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Acato Products: WP REST Cache Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Acato WP REST Cache allows PHP Local File Inclusion. This issue affects WP REST Cache: from n/a through 2025.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-rest-cache/vulnerability/wordpress-wp-rest-cache-2025-1-0-local-file-inclusion-vulnerabi
om/database/wordpress/plugin/wp-rest-cache/vulnerability/wordpress-wp-rest-cache-2025-1-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52717 State: PUBLISHED Published: 2025-06-27T11:52:28.496Z Last Updated: 2025-06-27T14:47:28.749Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: chrisbadgett Products: LifterLMS Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in chrisbadgett LifterLMS allows SQL Injection. This issue affects LifterLMS: from n/a through 8.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/lifterlms/vulnerability/wordpress-lifterlms-8-0-6-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52718 State: PUBLISHED Published: 2025-07-04T11:17:56.975Z Last Updated: 2025-07-07T16:25:35.680Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: Bearsthemes Products: Alone Problem Types: CWE-94 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Bearsthemes Alone allows Remote Code Inclusion. This issue affects Alone: from n/a through 7.8.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/alone/vulnerability/wordpress-alone-7-8-2-arbitrary-code-execution-vulnerability?_s_id=cve
CVE ID: CVE-2025-52719 State: PUBLISHED Published: 2025-06-20T15:03:37.331Z Last Updated: 2025-06-23T16:22:56.149Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Metagauss Products: ProfileGrid Problem Types: CWE-497 Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss ProfileGrid allows Retrieve Embedded Sensitive Data. This issue affects ProfileGrid : from n/a through 5.9.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/profilegrid-user-profiles-groups-and-communities/vulnerability/wordpress-profilegrid-plugin-5-9-5-2-full-pa
press/plugin/profilegrid-user-profiles-groups-and-communities/vulnerability/wordpress-profilegrid-plugin-5-9-5-2-full-path-disclosure-fpd-vulnerability?_s_id=cve
CVE ID: CVE-2025-52720 State: PUBLISHED Published: 2025-08-14T10:34:03.399Z Last Updated: 2025-08-14T14:44:05.881Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: highwarden Products: Super Store Finder Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder allows SQL Injection. This issue affects Super Store Finder: from n/a through 7.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/superstorefinder-wp/vulnerability/wordpress-super-store-finder-plugin-7-5-sql-injection-vulnerabi
abase/wordpress/plugin/superstorefinder-wp/vulnerability/wordpress-super-store-finder-plugin-7-5-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52721 State: PUBLISHED Published: 2025-08-14T10:34:02.844Z Last Updated: 2025-08-14T14:44:11.314Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: LCweb Products: Global Gallery Problem Types: CWE-862 Description: Missing Authorization vulnerability in LCweb Global Gallery allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Global Gallery: from n/a through 9.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/global-gallery/vulnerability/wordpress-global-gallery-plugin-9-2-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-52722 State: PUBLISHED Published: 2025-06-27T11:52:27.828Z Last Updated: 2025-06-27T14:47:39.983Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: JoinWebs Products: Classiera Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoinWebs Classiera allows SQL Injection. This issue affects Classiera: from n/a through 4.0.34. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/classiera/vulnerability/wordpress-classiera-4-0-34-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52723 State: PUBLISHED Published: 2025-06-27T11:52:27.242Z Last Updated: 2025-06-27T13:07:12.030Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: codesupplyco Products: Networker Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in codesupplyco Networker allows PHP Local File Inclusion. This issue affects Networker: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/networker/vulnerability/wordpress-networker-1-2-0-local-file-inclusion-vulnerability?_s_id=cv
m/database/wordpress/theme/networker/vulnerability/wordpress-networker-1-2-0-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-52724 State: PUBLISHED Published: 2025-06-27T11:52:26.703Z Last Updated: 2025-06-27T13:08:43.396Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: BoldThemes Products: Amwerk Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in BoldThemes Amwerk allows Object Injection. This issue affects Amwerk: from n/a through 1.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/amwerk/vulnerability/wordpress-amwerk-1-2-0-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52725 State: PUBLISHED Published: 2025-06-27T11:52:26.104Z Last Updated: 2025-06-27T13:09:03.530Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: pebas Products: CouponXxL Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in pebas CouponXxL allows Object Injection. This issue affects CouponXxL: from n/a through 3.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/couponxxl/vulnerability/wordpress-couponxxl-3-0-0-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-52726 State: PUBLISHED Published: 2025-06-27T11:52:25.548Z Last Updated: 2025-06-27T13:09:22.722Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: pebas Products: CouponXxL Custom Post Types Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in pebas CouponXxL Custom Post Types allows Privilege Escalation. This issue affects CouponXxL Custom Post Types: from n/a through 3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/couponxxl-cpt/vulnerability/wordpress-couponxxl-custom-post-types-3-0-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-52727 State: PUBLISHED Published: 2025-06-27T11:52:24.978Z Last Updated: 2025-06-27T13:09:44.399Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: QuanticaLabs Products: CSS3 Vertical Web Pricing Tables Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs CSS3 Vertical Web Pricing Tables allows Reflected XSS. This issue affects CSS3 Vertical Web Pricing Tables: from n/a through 1.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/css3_vertical_web_pricing_tables/vulnerability/wordpres
: References: - https://patchstack.com/database/wordpress/plugin/css3_vertical_web_pricing_tables/vulnerability/wordpress-css3-vertical-web-pricing-tables-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve