Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-31595 State: PUBLISHED Published: 2025-03-31T12:55:30.447Z Last Updated: 2025-03-31T15:00:24.364Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: wpdiscover Products: Timeline Event History Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdiscover Timeline Event History allows Stored XSS. This issue affects Timeline Event History: from n/a through 3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/timeline-event-history/vulnerability/wordpress-timeline-event-history-plugin-3-2-cross-sit
com/database/wordpress/plugin/timeline-event-history/vulnerability/wordpress-timeline-event-history-plugin-3-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31596 State: PUBLISHED Published: 2025-03-31T12:55:32.025Z Last Updated: 2025-03-31T15:00:01.338Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Chatwee Products: Chat by Chatwee Problem Types: CWE-862 Description: Missing Authorization vulnerability in Chatwee Chat by Chatwee allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Chat by Chatwee: from n/a through 2.1.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/chatwee/vulnerability/wordpress-chat-by-chatwee-plugin-2-1-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31597 State: PUBLISHED Published: 2025-03-31T12:55:32.581Z Last Updated: 2025-03-31T14:59:15.259Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: crazycric Products: Ultimate Live Cricket WordPress Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in crazycric Ultimate Live Cricket WordPress Lite allows Stored XSS. This issue affects Ultimate Live Cricket WordPress Lite: from n/a through 1.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ultimate-live-cricket-lite/vulnerability/wordpre
ichment: References: - https://patchstack.com/database/wordpress/plugin/ultimate-live-cricket-lite/vulnerability/wordpress-ultimate-live-cricket-wordpress-lite-plugin-1-4-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31598 State: PUBLISHED Published: 2025-03-31T12:55:33.122Z Last Updated: 2025-03-31T14:58:57.774Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WPFactory Products: Quantity Dynamic Pricing & Bulk Discounts for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Quantity Dynamic Pricing & Bulk Discounts for WooCommerce allows Stored XSS. This issue affects Quantity Dynamic Pricing & Bulk Discounts for WooCommerce: from n/a through 4.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wo
m n/a through 4.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wholesale-pricing-woocommerce/vulnerability/wordpress-quantity-dynamic-pricing-bulk-discounts-for-woocommerce-plugin-4-0-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31599 State: PUBLISHED Published: 2025-04-11T08:42:51.037Z Last Updated: 2025-04-11T15:13:05.151Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) Vendors: N-Media Products: Bulk Product Sync Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in N-Media Bulk Product Sync allows SQL Injection. This issue affects Bulk Product Sync: from n/a through 8.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sync-wc-google/vulnerability/wordpress-bulk-product-sync-plugin-8-6-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31600 State: PUBLISHED Published: 2025-03-31T12:55:33.679Z Last Updated: 2025-03-31T14:45:47.305Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: designnbuy Products: DesignO Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in designnbuy DesignO allows Cross Site Request Forgery. This issue affects DesignO: from n/a through 2.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/designo/vulnerability/wordpress-designo-plugin-2-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31601 State: PUBLISHED Published: 2025-03-31T12:55:34.198Z Last Updated: 2025-03-31T16:21:49.652Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: appointy Products: Appointy Appointment Scheduler Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in appointy Appointy Appointment Scheduler allows Cross Site Request Forgery. This issue affects Appointy Appointment Scheduler: from n/a through 4.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/appointy-appointment-scheduler/vulnerability/wordpress-appointy-appointment-scheduler-plugin-4-2-1-csr
/wordpress/plugin/appointy-appointment-scheduler/vulnerability/wordpress-appointy-appointment-scheduler-plugin-4-2-1-csrf-to-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-31602 State: PUBLISHED Published: 2025-03-31T12:55:34.711Z Last Updated: 2025-03-31T15:51:08.782Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: apimofficiel Products: Apimo Connector Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in apimofficiel Apimo Connector allows Cross Site Request Forgery. This issue affects Apimo Connector: from n/a through 2.6.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/apimo/vulnerability/wordpress-apimo-connector-plugin-2-6-3-1-cross-site-request-forgery-csrf-to-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-31603 State: PUBLISHED Published: 2025-03-31T12:55:35.226Z Last Updated: 2025-03-31T15:50:36.077Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: moshensky Products: CF7 Spreadsheets Problem Types: CWE-862 Description: Missing Authorization vulnerability in moshensky CF7 Spreadsheets allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CF7 Spreadsheets: from n/a through 2.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cf7-spreadsheets/vulnerability/wordpress-cf7-spreadsheets-plugin-2-3-2-settings-change-vulnerability?_s_id=cve
CVE ID: CVE-2025-31604 State: PUBLISHED Published: 2025-03-31T12:55:35.795Z Last Updated: 2025-03-31T15:46:29.948Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Cal.com Products: Cal.com Problem Types: CWE-80 Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cal.com Cal.com allows Stored XSS. This issue affects Cal.com: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cal-com/vulnerability/wordpress-cal-com-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31605 State: PUBLISHED Published: 2025-03-31T12:55:36.361Z Last Updated: 2025-03-31T15:40:45.174Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: WeblineIndia Products: Welcome Popup Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WeblineIndia Welcome Popup allows Stored XSS. This issue affects Welcome Popup: from n/a through 1.0.10. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/welcome-popup/vulnerability/wordpress-welcome-popup-plugin-1-0-10-cross-site-scripting-xss-vulnerability?_s_id
ss/plugin/welcome-popup/vulnerability/wordpress-welcome-popup-plugin-1-0-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31606 State: PUBLISHED Published: 2025-03-31T12:55:36.949Z Last Updated: 2025-03-31T13:45:33.813Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: softpulseinfotech Products: SP Blog Designer Problem Types: CWE-862 Description: Missing Authorization vulnerability in softpulseinfotech SP Blog Designer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SP Blog Designer: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sp-blog-designer/vulnerability/wordpress-sp-blog-designer-plugin-1-0-0-arbitrary-shortcode-execution
se/wordpress/plugin/sp-blog-designer/vulnerability/wordpress-sp-blog-designer-plugin-1-0-0-arbitrary-shortcode-execution-vulnerability?_s_id=cve
CVE ID: CVE-2025-31607 State: PUBLISHED Published: 2025-03-31T12:55:37.511Z Last Updated: 2025-03-31T13:45:09.254Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: flomei Products: Simple-Audioplayer Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in flomei Simple-Audioplayer allows Stored XSS. This issue affects Simple-Audioplayer: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-audioplayer/vulnerability/wordpress-simple-audioplayer-plugin-1-1-cross-site-scripting-xss-vulnerabilit
ss/plugin/simple-audioplayer/vulnerability/wordpress-simple-audioplayer-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31608 State: PUBLISHED Published: 2025-03-31T12:55:38.079Z Last Updated: 2025-03-31T13:44:43.354Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: reDim GmbH Products: CookieHint WP Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reDim GmbH CookieHint WP allows Stored XSS. This issue affects CookieHint WP: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cookiehint-wp/vulnerability/wordpress-cookiehint-wp-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31609 State: PUBLISHED Published: 2025-03-31T12:55:38.665Z Last Updated: 2025-03-31T13:43:55.416Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Arni Cinco Products: WPCargo Track & Trace Problem Types: CWE-862 Description: Missing Authorization vulnerability in Arni Cinco WPCargo Track & Trace allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WPCargo Track & Trace: from n/a through 7.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpcargo/vulnerability/wordpress-wpcargo-track-trace-plugin-7-0-6-insecure-direct-object-references-
ase/wordpress/plugin/wpcargo/vulnerability/wordpress-wpcargo-track-trace-plugin-7-0-6-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE ID: CVE-2025-31610 State: PUBLISHED Published: 2025-03-31T12:55:39.236Z Last Updated: 2025-03-31T13:40:40.107Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: gingerplugins Products: Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gingerplugins Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme allows Stored XSS. This issue affects Notification Bar, Sticky Notification Bar, Sticky Welcome Bar for any theme: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vu
Sticky Notification Bar, Sticky Welcome Bar for any theme: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/gp-notification-bar/vulnerability/wordpress-notification-bar-sticky-notification-bar-sticky-welcome-bar-for-any-theme-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31611 State: PUBLISHED Published: 2025-03-31T12:55:39.776Z Last Updated: 2025-03-31T13:39:46.918Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Shaharia Azam Products: Auto Post After Image Upload Problem Types: CWE-862 Description: Missing Authorization vulnerability in Shaharia Azam Auto Post After Image Upload allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Auto Post After Image Upload: from n/a through 1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/auto-post-after-image-upload/vulnerability/wordpress-auto-post-after-image
ps://patchstack.com/database/wordpress/plugin/auto-post-after-image-upload/vulnerability/wordpress-auto-post-after-image-upload-plugin-1-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31612 State: PUBLISHED Published: 2025-04-01T20:58:14.550Z Last Updated: 2025-04-10T14:36:22.355Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Sabuj Kundu Products: CBX Poll Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Sabuj Kundu CBX Poll allows Object Injection. This issue affects CBX Poll: from n/a through 1.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cbxpoll/vulnerability/wordpress-cbx-poll-plugin-1-2-7-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31613 State: PUBLISHED Published: 2025-03-31T12:55:40.288Z Last Updated: 2025-03-31T13:40:13.745Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Aboobacker. Products: AB Google Map Travel Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Aboobacker. AB Google Map Travel allows Cross Site Request Forgery. This issue affects AB Google Map Travel : from n/a through 4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ab-google-map-travel/vulnerability/wordpress-ab-google-map-travel-plugin-4-6-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31614 State: PUBLISHED Published: 2025-03-31T12:55:40.859Z Last Updated: 2025-03-31T13:39:24.927Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: hiroprot Products: Terms Before Download Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hiroprot Terms Before Download allows Stored XSS. This issue affects Terms Before Download: from n/a through 1.0.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/terms-before-download/vulnerability/wordpress-terms-before-download-plugin-1-0-4-cross-site-scr
atabase/wordpress/plugin/terms-before-download/vulnerability/wordpress-terms-before-download-plugin-1-0-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31615 State: PUBLISHED Published: 2025-03-31T12:55:41.473Z Last Updated: 2025-03-31T13:39:00.261Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: owenr88 Products: Simple Contact Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in owenr88 Simple Contact Forms allows Stored XSS. This issue affects Simple Contact Forms: from n/a through 1.6.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-contact-forms/vulnerability/wordpress-simple-contact-forms-plugin-1-6-4-csrf-to-stored-xss-vuln
/wordpress/plugin/simple-contact-forms/vulnerability/wordpress-simple-contact-forms-plugin-1-6-4-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31616 State: PUBLISHED Published: 2025-03-31T12:55:42.056Z Last Updated: 2025-03-31T15:40:23.260Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: AdminGeekZ Products: Varnish WordPress Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in AdminGeekZ Varnish WordPress allows Cross Site Request Forgery. This issue affects Varnish WordPress: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/varnish-wp/vulnerability/wordpress-varnish-wordpress-plugin-1-7-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31617 State: PUBLISHED Published: 2025-03-31T12:55:42.615Z Last Updated: 2025-03-31T14:45:28.922Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Gagan Deep Singh Products: PostmarkApp Email Integrator Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Gagan Deep Singh PostmarkApp Email Integrator allows Cross Site Request Forgery. This issue affects PostmarkApp Email Integrator: from n/a through 2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/postmarkapp-email-integrator/vulnerability/wordpress-postmarkapp-email-integrator-plugin-2-4-csr
tabase/wordpress/plugin/postmarkapp-email-integrator/vulnerability/wordpress-postmarkapp-email-integrator-plugin-2-4-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31618 State: PUBLISHED Published: 2025-03-31T12:55:43.170Z Last Updated: 2025-03-31T14:44:55.548Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Jaap Jansma Products: Connector to CiviCRM with CiviMcRestFace Problem Types: CWE-862 Description: Missing Authorization vulnerability in Jaap Jansma Connector to CiviCRM with CiviMcRestFace allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Connector to CiviCRM with CiviMcRestFace: from n/a through 1.0.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/connector-civicrm-mcrestface/vulnerabili
DP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/connector-civicrm-mcrestface/vulnerability/wordpress-connector-to-civicrm-with-civimcrestface-plugin-1-0-9-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31619 State: PUBLISHED Published: 2025-04-01T20:58:14.696Z Last Updated: 2025-04-10T14:31:43.678Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L) Vendors: marcoingraiti Products: Actionwear products sync Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in marcoingraiti Actionwear products sync allows SQL Injection. This issue affects Actionwear products sync: from n/a through 2.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/actionwear-products-sync/vulnerability/wordpress-actionwear-products-sync-p
s://patchstack.com/database/wordpress/plugin/actionwear-products-sync/vulnerability/wordpress-actionwear-products-sync-plugin-2-3-3-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-31620 State: PUBLISHED Published: 2025-03-31T12:55:43.710Z Last Updated: 2025-03-31T14:44:22.469Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: carperfer Products: CoverManager Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in carperfer CoverManager allows Stored XSS. This issue affects CoverManager: from n/a through 0.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/covermanager/vulnerability/wordpress-covermanager-plugin-0-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31621 State: PUBLISHED Published: 2025-03-31T12:55:44.214Z Last Updated: 2025-03-31T14:42:50.227Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: davidpaulsson Products: byBrick Accordion Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in davidpaulsson byBrick Accordion allows Stored XSS. This issue affects byBrick Accordion: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bybrick-accordion/vulnerability/wordpress-bybrick-accordion-plugin-1-0-cross-site-scripting-xss-vul
ase/wordpress/plugin/bybrick-accordion/vulnerability/wordpress-bybrick-accordion-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31622 State: PUBLISHED Published: 2025-04-03T13:27:11.999Z Last Updated: 2025-04-03T14:20:17.791Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Utkarsh Kukreti Products: Advanced Typekit Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Utkarsh Kukreti Advanced Typekit allows Stored XSS. This issue affects Advanced Typekit: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/advanced-typekit/vulnerability/wordpress-advanced-typekit-plugin-1-0-1-cross-site-scripting-xss-
tabase/wordpress/plugin/advanced-typekit/vulnerability/wordpress-advanced-typekit-plugin-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31623 State: PUBLISHED Published: 2025-03-31T12:55:44.787Z Last Updated: 2025-03-31T14:32:12.283Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: richtexteditor Products: Rich Text Editor Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in richtexteditor Rich Text Editor allows Stored XSS. This issue affects Rich Text Editor: from n/a through 1.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/richtexteditor/vulnerability/wordpress-rich-text-editor-plugin-1-0-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31624 State: PUBLISHED Published: 2025-03-31T12:55:45.326Z Last Updated: 2025-03-31T14:31:26.875Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: LABCAT Products: Processing Projects Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LABCAT Processing Projects allows DOM-Based XSS. This issue affects Processing Projects: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/processing-projects/vulnerability/wordpress-processing-projects-plugin-1-0-2-cross-site-scripting-xss-
/wordpress/plugin/processing-projects/vulnerability/wordpress-processing-projects-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve