Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-49253 State: PUBLISHED Published: 2025-06-17T15:01:29.219Z Last Updated: 2025-06-18T14:45:46.312Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: thembay Products: Lasa Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Lasa allows PHP Local File Inclusion. This issue affects Lasa: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/lasa/vulnerability/wordpress-lasa-1-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49254 State: PUBLISHED Published: 2025-06-17T15:01:28.668Z Last Updated: 2025-06-18T14:51:40.483Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: thembay Products: Nika Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika allows PHP Local File Inclusion. This issue affects Nika: from n/a through 1.2.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/nika/vulnerability/wordpress-nika-1-2-8-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49255 State: PUBLISHED Published: 2025-06-17T15:01:28.175Z Last Updated: 2025-06-18T15:03:05.214Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: thembay Products: Ruza Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Ruza allows PHP Local File Inclusion. This issue affects Ruza: from n/a through 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/ruza/vulnerability/wordpress-ruza-1-0-7-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49256 State: PUBLISHED Published: 2025-06-17T15:01:27.698Z Last Updated: 2025-06-18T15:06:29.623Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: thembay Products: Sapa Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Sapa allows PHP Local File Inclusion. This issue affects Sapa: from n/a through 1.1.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/sapa/vulnerability/wordpress-sapa-1-1-14-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49257 State: PUBLISHED Published: 2025-06-17T15:01:27.235Z Last Updated: 2025-06-18T15:11:31.548Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: thembay Products: Zota Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota allows PHP Local File Inclusion. This issue affects Zota: from n/a through 1.3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/zota/vulnerability/wordpress-zota-1-3-8-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49258 State: PUBLISHED Published: 2025-06-17T15:01:26.682Z Last Updated: 2025-06-18T15:18:29.189Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: thembay Products: Maia Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Maia allows PHP Local File Inclusion. This issue affects Maia: from n/a through 1.1.15. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/maia/vulnerability/wordpress-maia-1-1-15-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49259 State: PUBLISHED Published: 2025-06-17T15:01:26.202Z Last Updated: 2025-06-18T15:54:29.886Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: thembay Products: Hara Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Hara allows PHP Local File Inclusion. This issue affects Hara: from n/a through 1.2.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/hara/vulnerability/wordpress-hara-1-2-10-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49260 State: PUBLISHED Published: 2025-06-17T15:01:25.733Z Last Updated: 2025-06-18T15:57:33.594Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: thembay Products: Aora Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora allows PHP Local File Inclusion. This issue affects Aora: from n/a through 1.3.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/aora/vulnerability/wordpress-aora-1-3-9-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49261 State: PUBLISHED Published: 2025-06-17T15:01:25.253Z Last Updated: 2025-06-18T16:14:54.957Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: thembay Products: Diza Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza allows PHP Local File Inclusion. This issue affects Diza: from n/a through 1.3.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/diza/vulnerability/wordpress-diza-1-3-8-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49262 State: PUBLISHED Published: 2025-06-06T12:53:38.113Z Last Updated: 2025-06-06T16:06:06.300Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: shaonsina Products: Sina Extension for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shaonsina Sina Extension for Elementor allows Stored XSS. This issue affects Sina Extension for Elementor: from n/a through 3.6.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sina-extension-for-elementor/vulnerability/wordpress-sina-extension-for-el
ps://patchstack.com/database/wordpress/plugin/sina-extension-for-elementor/vulnerability/wordpress-sina-extension-for-elementor-3-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49263 State: PUBLISHED Published: 2025-06-06T12:53:38.578Z Last Updated: 2025-06-06T16:05:57.935Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: WCVendors Products: WC Vendors Marketplace Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WCVendors WC Vendors Marketplace allows Blind SQL Injection. This issue affects WC Vendors Marketplace: from n/a through 2.5.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wc-vendors/vulnerability/wordpress-wc-vendors-marketplace-2-5-6-sql-injection-vulne
hstack.com/database/wordpress/plugin/wc-vendors/vulnerability/wordpress-wc-vendors-marketplace-2-5-6-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-49264 State: PUBLISHED Published: 2025-08-14T10:34:10.536Z Last Updated: 2025-08-14T14:43:42.750Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Cloud Infrastructure Services Products: Cloud SAML SSO - Single Sign On Login Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Cloud Infrastructure Services Cloud SAML SSO - Single Sign On Login allows PHP Local File Inclusion. This issue affects Cloud SAML SSO - Single Sign On Login: from n/a through 1.0.18. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com
Login: from n/a through 1.0.18. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cloud-sso-single-sign-on/vulnerability/wordpress-cloud-saml-sso-single-sign-on-login-1-0-18-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49265 State: PUBLISHED Published: 2025-06-09T15:53:53.079Z Last Updated: 2025-06-09T19:46:29.106Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: WP Swings Products: Membership For WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in WP Swings Membership For WooCommerce allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Membership For WooCommerce: from n/a through 2.8.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/membership-for-woocommerce/vulnerability/wordpress-membership-for-woocommerce-2-8-1-broken-acces
tabase/wordpress/plugin/membership-for-woocommerce/vulnerability/wordpress-membership-for-woocommerce-2-8-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49266 State: PUBLISHED Published: 2025-06-17T15:01:24.743Z Last Updated: 2025-06-18T16:18:31.935Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Rustaurius Products: Ultimate Reviews Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rustaurius Ultimate Reviews allows Reflected XSS. This issue affects Ultimate Reviews: from n/a through 3.2.14. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ultimate-reviews/vulnerability/wordpress-ultimate-reviews-plugin-3-2-14-reflected-cross-site-scripting-x
ordpress/plugin/ultimate-reviews/vulnerability/wordpress-ultimate-reviews-plugin-3-2-14-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49267 State: PUBLISHED Published: 2025-08-14T10:34:10.018Z Last Updated: 2025-08-14T14:43:48.298Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: Shabti Kaplan Products: Frontend Admin by DynamiApps Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps allows Blind SQL Injection. This issue affects Frontend Admin by DynamiApps: from n/a through 3.28.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-fronte
References: - https://patchstack.com/database/wordpress/plugin/acf-frontend-form-element/vulnerability/wordpress-frontend-admin-by-dynamiapps-3-28-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-49268 State: PUBLISHED Published: 2025-06-06T12:53:39.044Z Last Updated: 2025-06-06T16:05:51.609Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Soft8Soft LLC Products: Verge3D Problem Types: CWE-862 Description: Missing Authorization vulnerability in Soft8Soft LLC Verge3D allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Verge3D: from n/a through 4.9.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/verge3d/vulnerability/wordpress-verge3d-4-9-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49269 State: PUBLISHED Published: 2025-06-06T12:53:39.500Z Last Updated: 2025-06-06T16:05:41.546Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Anton Vanyukov Products: Market Exporter Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Anton Vanyukov Market Exporter allows Cross Site Request Forgery. This issue affects Market Exporter: from n/a through 2.0.22. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/market-exporter/vulnerability/wordpress-market-exporter-2-0-22-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49270 State: PUBLISHED Published: 2025-06-06T12:53:39.962Z Last Updated: 2025-06-06T19:24:34.007Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Mario Peshev Products: WP-CRM System Problem Types: CWE-862 Description: Missing Authorization vulnerability in Mario Peshev WP-CRM System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WP-CRM System: from n/a through 3.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-crm-system/vulnerability/wordpress-wp-crm-system-3-4-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49271 State: PUBLISHED Published: 2025-08-14T10:34:09.459Z Last Updated: 2025-08-14T16:02:46.161Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GravityWP Products: GravityWP - Merge Tags Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in GravityWP GravityWP - Merge Tags allows PHP Local File Inclusion. This issue affects GravityWP - Merge Tags: from n/a through 1.4.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gravitywp-merge-tags/vulnerability/wordpress-gravitywp-merg
ferences: - https://patchstack.com/database/wordpress/plugin/gravitywp-merge-tags/vulnerability/wordpress-gravitywp-merge-tags-1-4-4-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49272 State: PUBLISHED Published: 2025-06-06T12:53:40.416Z Last Updated: 2025-06-06T19:24:28.637Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: sergiotrinity Products: Trinity Audio Problem Types: CWE-862 Description: Missing Authorization vulnerability in sergiotrinity Trinity Audio allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Trinity Audio: from n/a through 5.20.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/trinity-audio/vulnerability/wordpress-trinity-audio-5-20-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-49273 State: PUBLISHED Published: 2025-06-06T12:53:40.895Z Last Updated: 2025-06-06T19:24:23.499Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Bill Minozzi Products: WP Tools Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Bill Minozzi WP Tools allows Cross Site Request Forgery. This issue affects WP Tools: from n/a through 5.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wptools/vulnerability/wordpress-wp-tools-5-24-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49274 State: PUBLISHED Published: 2025-07-04T11:18:01.333Z Last Updated: 2025-07-07T14:59:57.472Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: awplife Products: Neom Blog Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in awplife Neom Blog allows Reflected XSS. This issue affects Neom Blog: from n/a through 0.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/neom-blog/vulnerability/wordpress-neom-blog-theme-0-0-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49275 State: PUBLISHED Published: 2025-06-09T15:53:52.274Z Last Updated: 2025-06-09T19:46:34.747Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Unfoldwp Products: Blogbyte Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unfoldwp Blogbyte allows PHP Local File Inclusion. This issue affects Blogbyte: from n/a through 1.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/blogbyte/vulnerability/wordpress-blogbyte-1-1-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49276 State: PUBLISHED Published: 2025-06-09T15:53:51.518Z Last Updated: 2025-06-09T19:46:40.361Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Unfoldwp Products: Blogmine Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unfoldwp Blogmine allows PHP Local File Inclusion. This issue affects Blogmine: from n/a through 1.1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/blogmine/vulnerability/wordpress-blogmine-1-1-7-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49277 State: PUBLISHED Published: 2025-06-09T15:53:50.790Z Last Updated: 2025-06-09T19:46:47.612Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Unfoldwp Products: Blogprise Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unfoldwp Blogprise allows PHP Local File Inclusion. This issue affects Blogprise: from n/a through 1.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/blogprise/vulnerability/wordpress-blogprise-1-0-9-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49278 State: PUBLISHED Published: 2025-06-09T15:53:50.048Z Last Updated: 2025-06-09T19:46:53.216Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Unfoldwp Products: Blogty Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unfoldwp Blogty allows PHP Local File Inclusion. This issue affects Blogty: from n/a through 1.0.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/blogty/vulnerability/wordpress-blogty-1-0-11-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49279 State: PUBLISHED Published: 2025-06-09T15:53:49.232Z Last Updated: 2025-06-09T19:46:58.654Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Unfoldwp Products: Blogvy Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unfoldwp Blogvy allows PHP Local File Inclusion. This issue affects Blogvy: from n/a through 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/blogvy/vulnerability/wordpress-blogvy-1-0-7-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49280 State: PUBLISHED Published: 2025-06-09T15:53:48.534Z Last Updated: 2025-06-09T19:47:12.485Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Unfoldwp Products: Magty Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unfoldwp Magty allows PHP Local File Inclusion. This issue affects Magty: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/magty/vulnerability/wordpress-magty-1-0-6-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49281 State: PUBLISHED Published: 2025-06-09T15:53:47.818Z Last Updated: 2025-06-09T19:47:22.319Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Unfoldwp Products: Magways Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unfoldwp Magways allows PHP Local File Inclusion. This issue affects Magways: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/magways/vulnerability/wordpress-magways-1-2-1-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49282 State: PUBLISHED Published: 2025-06-09T15:53:47.134Z Last Updated: 2025-06-09T19:47:28.272Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Unfoldwp Products: Magze Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Unfoldwp Magze allows PHP Local File Inclusion. This issue affects Magze: from n/a through 1.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/magze/vulnerability/wordpress-magze-1-0-9-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-49283 State: PUBLISHED Published: 2025-06-06T12:53:41.363Z Last Updated: 2025-06-06T19:24:17.967Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Matthias Nordwig Products: Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Matthias Nordwig Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant allows Cross Site Request Forgery. This issue affects Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant: from n/a through 4.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchst
GDPR-compliant: from n/a through 4.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gdpr-compliant-recaptcha-for-all-forms/vulnerability/wordpress-anti-spam-spam-protection-recaptcha-for-all-forms-and-gdpr-compliant-4-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49284 State: PUBLISHED Published: 2025-06-06T12:53:41.826Z Last Updated: 2025-06-06T19:24:12.624Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: wp-buy Products: WP Maintenance Mode & Site Under Construction Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in wp-buy WP Maintenance Mode & Site Under Construction allows Cross Site Request Forgery. This issue affects WP Maintenance Mode & Site Under Construction: from n/a through 4.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-maintenance-mode-site-under-construction/vulnerability/wordp
nces: - https://patchstack.com/database/wordpress/plugin/wp-maintenance-mode-site-under-construction/vulnerability/wordpress-wp-maintenance-mode-site-under-construction-4-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49285 State: PUBLISHED Published: 2025-06-06T12:53:42.278Z Last Updated: 2025-06-06T19:24:07.318Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: WP Legal Pages Products: WP Cookie Notice for GDPR, CCPA & ePrivacy Consent Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent allows Cross Site Request Forgery. This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through 3.8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gdpr-cookie-consent/vulnerabil