Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-os10-vulnerabilities
CVE ID: CVE-2025-46428 State: PUBLISHED Published: 2025-11-12T19:57:04.843Z Last Updated: 2025-11-13T04:55:38.406Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: SmartFabric OS10 Software Problem Types: CWE-77 Description: Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-upd
tes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-os10-vulnerabilities
CVE ID: CVE-2025-46430 State: PUBLISHED Published: 2025-11-10T15:59:35.862Z Last Updated: 2025-11-11T04:55:37.849Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Display and Peripheral Manager Problem Types: CWE-250 Description: Dell Display and Peripheral Manager, versions prior to 2.1.2.12, contains an Execution with Unnecessary Privileges vulnerability in the Installer. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000384546/dsa-2025-411
CVE ID: CVE-2025-46432 State: PUBLISHED Published: 2025-04-25T14:32:33.207Z Last Updated: 2025-04-25T15:27:09.553Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-532 Description: In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-46433 State: PUBLISHED Published: 2025-04-25T14:32:33.866Z Last Updated: 2025-04-25T15:26:46.712Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-23 Description: In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possible Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-46435 State: PUBLISHED Published: 2025-04-24T16:08:42.077Z Last Updated: 2025-04-25T13:55:01.725Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Yash Binani Products: Time Based Greeting Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Yash Binani Time Based Greeting allows Stored XSS. This issue affects Time Based Greeting: from n/a through 2.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/time-based-greeting/vulnerability/wordpress-time-based-greeting-plugin-2-2-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46436 State: PUBLISHED Published: 2025-04-24T16:08:43.210Z Last Updated: 2025-04-25T13:54:46.755Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Sebastian Echeverry Products: SCSS-Library Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Sebastian Echeverry SCSS-Library allows Cross Site Request Forgery. This issue affects SCSS-Library: from n/a through 0.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/scss-library/vulnerability/wordpress-scss-library-0-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-46437 State: PUBLISHED Published: 2025-05-23T12:43:48.870Z Last Updated: 2025-05-23T13:42:05.583Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: tayoricom Products: Tayori Form Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tayoricom Tayori Form allows Reflected XSS. This issue affects Tayori Form: from n/a through 1.2.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/tayori/vulnerability/wordpress-tayori-form-plugin-1-2-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46438 State: PUBLISHED Published: 2025-04-24T16:09:04.975Z Last Updated: 2025-04-25T13:50:12.706Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: warmwhisky Products: GTDB Guitar Tuners Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in warmwhisky GTDB Guitar Tuners allows Stored XSS. This issue affects GTDB Guitar Tuners: from n/a through 4.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/guitar-tuner/vulnerability/wordpress-gtdb-guitar-tuners-4-2-2-cross-site-scripting-xss-vulnerability
se/wordpress/plugin/guitar-tuner/vulnerability/wordpress-gtdb-guitar-tuners-4-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46439 State: PUBLISHED Published: 2025-04-24T16:08:42.652Z Last Updated: 2025-04-25T13:54:54.336Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H) Vendors: Vladimir Prelovac Products: Plugin Central Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Vladimir Prelovac Plugin Central allows Path Traversal. This issue affects Plugin Central: from n/a through 2.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/plugin-central/vulnerability/wordpress-plugin-central-plugin-2-5-1-csrf-to-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-46440 State: PUBLISHED Published: 2025-05-23T12:43:48.408Z Last Updated: 2025-05-23T13:42:25.826Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Mark Products: kStats Reloaded Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark kStats Reloaded allows Reflected XSS. This issue affects kStats Reloaded: from n/a through 0.7.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/kstats-reloaded/vulnerability/wordpress-kstats-reloaded-plugin-0-7-4-reflected-cross-site-scripting-xss-vulnerability?_s
kstats-reloaded/vulnerability/wordpress-kstats-reloaded-plugin-0-7-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46441 State: PUBLISHED Published: 2025-05-19T19:42:37.039Z Last Updated: 2025-05-19T21:20:17.133Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: ctltwp Products: Section Widget Problem Types: CWE-35 Description: Path Traversal: '.../...//' vulnerability in ctltwp Section Widget allows Path Traversal.This issue affects Section Widget: from n/a through 3.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/section-widget/vulnerability/wordpress-section-widget-plugin-3-2-5-path-traversal-vulnerability?_s_id=cve
CVE ID: CVE-2025-46442 State: PUBLISHED Published: 2025-04-24T16:09:18.296Z Last Updated: 2025-04-24T20:00:53.857Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Casey Johnson Products: Loan Calculator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Casey Johnson Loan Calculator allows Stored XSS. This issue affects Loan Calculator: from n/a through 1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/repayment-calculator/vulnerability/wordpress-loan-calculator-plugin-1-3-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46443 State: PUBLISHED Published: 2025-04-24T16:08:43.760Z Last Updated: 2025-04-25T13:54:38.719Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Adam Pery Products: Animate Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Adam Pery Animate allows Server Side Request Forgery. This issue affects Animate: from n/a through 0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/animate/vulnerability/wordpress-animate-0-5-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-46444 State: PUBLISHED Published: 2025-05-23T12:43:47.879Z Last Updated: 2025-05-23T13:42:44.533Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: scripteo Products: Ads Pro Plugin Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in scripteo Ads Pro Plugin allows PHP Local File Inclusion. This issue affects Ads Pro Plugin: from n/a through 4.88. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ap-plugin-scripteo/vulnerability/wordpress-ads-pro-plugin-4-88-local-file-inclusion-vu
ack.com/database/wordpress/plugin/ap-plugin-scripteo/vulnerability/wordpress-ads-pro-plugin-4-88-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-46445 State: PUBLISHED Published: 2025-04-24T16:09:05.610Z Last Updated: 2025-04-25T13:49:57.511Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: pReya Products: External Markdown Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pReya External Markdown allows Stored XSS. This issue affects External Markdown: from n/a through 0.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/external-markdown/vulnerability/wordpress-external-markdown-0-0-1-cross-site-scripting-xss-vulnerability?_s_id=cv
plugin/external-markdown/vulnerability/wordpress-external-markdown-0-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46446 State: PUBLISHED Published: 2025-05-23T12:43:47.397Z Last Updated: 2025-05-23T13:43:02.121Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ivanrojas Products: Libro de Reclamaciones Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ivanrojas Libro de Reclamaciones allows Stored XSS. This issue affects Libro de Reclamaciones: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/libro-de-reclamaciones/vulnerability/wordpress-libro-de-reclamaciones-1-0-1-cross-site-scrip
m/database/wordpress/plugin/libro-de-reclamaciones/vulnerability/wordpress-libro-de-reclamaciones-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46447 State: PUBLISHED Published: 2025-04-24T16:09:24.737Z Last Updated: 2025-04-24T19:59:26.451Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WPFable Products: Fable Extra Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFable Fable Extra allows DOM-Based XSS. This issue affects Fable Extra: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/fable-extra/vulnerability/wordpress-fable-extra-1-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46448 State: PUBLISHED Published: 2025-05-23T12:43:46.932Z Last Updated: 2025-05-23T13:43:20.466Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: reifsnyderb Products: Document Management System Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reifsnyderb Document Management System allows Reflected XSS. This issue affects Document Management System: from n/a through 1.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dms/vulnerability/wordpress-document-management-system-1-24-cross-site-scr
ps://patchstack.com/database/wordpress/plugin/dms/vulnerability/wordpress-document-management-system-1-24-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46449 State: PUBLISHED Published: 2025-04-24T16:09:06.198Z Last Updated: 2025-04-25T13:49:41.796Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Novium Products: WoWHead Tooltips Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Novium WoWHead Tooltips allows Stored XSS. This issue affects WoWHead Tooltips: from n/a through 2.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wowhead-tooltips/vulnerability/wordpress-wowhead-tooltips-2-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46450 State: PUBLISHED Published: 2025-04-24T16:08:44.315Z Last Updated: 2025-04-25T13:54:31.681Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: x000x Products: occupancyplan Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in x000x occupancyplan allows Stored XSS. This issue affects occupancyplan: from n/a through 1.0.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/occupancyplan/vulnerability/wordpress-occupancyplan-plugin-1-0-3-0-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46451 State: PUBLISHED Published: 2025-04-24T16:09:18.875Z Last Updated: 2025-04-24T20:00:46.641Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Syed Balkhi Products: Floating Social Bar Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Balkhi Floating Social Bar allows Stored XSS. This issue affects Floating Social Bar: from n/a through 1.1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/floating-social-bar/vulnerability/wordpress-floating-social-bar-1-1-7-cross-site-scripting-xss-
atabase/wordpress/plugin/floating-social-bar/vulnerability/wordpress-floating-social-bar-1-1-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46452 State: PUBLISHED Published: 2025-04-24T16:08:44.886Z Last Updated: 2025-04-25T13:54:24.869Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Olav Kolbu Products: Google News Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Olav Kolbu Google News allows Stored XSS. This issue affects Google News: from n/a through 2.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/google-news/vulnerability/wordpress-google-news-plugin-2-5-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46453 State: PUBLISHED Published: 2025-04-24T16:09:06.761Z Last Updated: 2025-05-10T02:55:25.315Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: CreatorTeam Products: Zoho Creator Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreatorTeam Zoho Creator Forms allows Stored XSS. This issue affects Zoho Creator Forms: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/zohocreator/vulnerability/wordpress-zoho-creator-forms-1-0-5-cross-site-scripting-xss-vulnerabilit
base/wordpress/plugin/zohocreator/vulnerability/wordpress-zoho-creator-forms-1-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46454 State: PUBLISHED Published: 2025-05-23T12:43:46.472Z Last Updated: 2025-05-23T13:43:39.013Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: svil4ok Products: Meta Keywords &amp; Description Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in svil4ok Meta Keywords &amp; Description allows PHP Local File Inclusion. This issue affects Meta Keywords &amp; Description: from n/a through 0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-meta-keywords-meta-description/vuln
ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-meta-keywords-meta-description/vulnerability/wordpress-meta-keywords-description-0-8-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-46455 State: PUBLISHED Published: 2025-05-23T12:43:46.010Z Last Updated: 2025-05-23T13:43:55.889Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: IndigoThemes Products: WP HRM LITE Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IndigoThemes WP HRM LITE allows SQL Injection. This issue affects WP HRM LITE: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-hrm-lite-human-resource-management-system/vulnerability/wordpress-wp-hrm-lite-1-1-sql-injection-vulnerability?_
lugin/wp-hrm-lite-human-resource-management-system/vulnerability/wordpress-wp-hrm-lite-1-1-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-46456 State: PUBLISHED Published: 2025-05-23T12:43:45.525Z Last Updated: 2025-05-23T14:47:40.338Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Jason Products: Theme Blvd Sliders Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jason Theme Blvd Sliders allows Reflected XSS. This issue affects Theme Blvd Sliders: from n/a through 1.2.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/theme-blvd-sliders/vulnerability/wordpress-theme-blvd-sliders-plugin-1-2-5-reflected-cross-site-scripting-xss
ess/plugin/theme-blvd-sliders/vulnerability/wordpress-theme-blvd-sliders-plugin-1-2-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46457 State: PUBLISHED Published: 2025-04-24T16:09:07.315Z Last Updated: 2025-04-25T13:49:12.185Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: digontoahsan Products: Wp Custom CMS Block Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in digontoahsan Wp Custom CMS Block allows Stored XSS. This issue affects Wp Custom CMS Block: from n/a through 2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-custom-cms-block/vulnerability/wordpress-wp-custom-cms-block-plugin-2-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46458 State: PUBLISHED Published: 2025-05-23T12:43:44.578Z Last Updated: 2025-05-23T14:49:24.829Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L) Vendors: x000x Products: occupancyplan Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in x000x occupancyplan allows SQL Injection. This issue affects occupancyplan: from n/a through 1.0.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/occupancyplan/vulnerability/wordpress-occupancyplan-plugin-1-0-3-0-csrf-to-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-46459 State: PUBLISHED Published: 2025-04-24T16:09:19.533Z Last Updated: 2025-04-24T20:00:36.950Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Ralf Hortt Products: Confirm User Registration Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ralf Hortt Confirm User Registration allows Stored XSS. This issue affects Confirm User Registration: from n/a through 2.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/confirm-user-registration/vulnerability/wordpress-confirm-user-registration-2-1
patchstack.com/database/wordpress/plugin/confirm-user-registration/vulnerability/wordpress-confirm-user-registration-2-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46460 State: PUBLISHED Published: 2025-05-23T12:43:44.106Z Last Updated: 2025-05-23T14:49:43.056Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: Detheme Products: Easy Guide Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Detheme Easy Guide allows SQL Injection. This issue affects Easy Guide: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-easy-guide/vulnerability/wordpress-easy-guide-1-0-0-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-46461 State: PUBLISHED Published: 2025-04-24T16:09:07.900Z Last Updated: 2025-04-25T13:48:56.915Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Relentless Apps Products: RRSSB Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Relentless Apps RRSSB allows DOM-Based XSS. This issue affects RRSSB: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rrssb/vulnerability/wordpress-rrssb-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-46462 State: PUBLISHED Published: 2025-04-24T16:08:45.464Z Last Updated: 2025-04-25T13:54:17.048Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Trân Minh-Quân Products: WPVN Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Trân Minh-Quân WPVN allows Cross Site Request Forgery. This issue affects WPVN: from n/a through 0.7.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpvn-username-changer/vulnerability/wordpress-wpvn-0-7-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-46463 State: PUBLISHED Published: 2025-05-23T12:43:43.644Z Last Updated: 2025-05-23T14:49:58.614Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Yamna Khawaja Products: Mailing Group Listserv Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yamna Khawaja Mailing Group Listserv allows SQL Injection. This issue affects Mailing Group Listserv: from n/a through 3.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-mailing-group/vulnerability/wordpress-mailing-group-listserv-3-0-4-sql-injecti
tchstack.com/database/wordpress/plugin/wp-mailing-group/vulnerability/wordpress-mailing-group-listserv-3-0-4-sql-injection-vulnerability?_s_id=cve