Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-53276 State: PUBLISHED Published: 2025-06-27T13:21:17.487Z Last Updated: 2025-06-27T13:50:49.508Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: omnipressteam Products: Omnipress Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in omnipressteam Omnipress allows DOM-Based XSS. This issue affects Omnipress: from n/a through 1.6.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/omnipress/vulnerability/wordpress-omnipress-plugin-1-6-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53277 State: PUBLISHED Published: 2025-06-27T13:21:18.230Z Last Updated: 2025-06-27T13:50:29.033Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Infigo Software Products: IS-theme-companion Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Infigo Software IS-theme-companion allows Object Injection. This issue affects IS-theme-companion: from n/a through 1.57. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/weblizar-companion/vulnerability/wordpress-is-theme-companion-plugin-1-57-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53278 State: PUBLISHED Published: 2025-06-27T13:21:18.848Z Last Updated: 2025-06-27T13:50:11.320Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WPeka Products: WP AdCenter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPeka WP AdCenter allows Stored XSS. This issue affects WP AdCenter: from n/a through 2.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpadcenter/vulnerability/wordpress-wp-adcenter-plugin-2-6-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53279 State: PUBLISHED Published: 2025-06-27T13:21:19.513Z Last Updated: 2025-06-27T13:49:52.528Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Aman Products: Popup addon for Ninja Forms Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon for Ninja Forms allows DOM-Based XSS. This issue affects Popup addon for Ninja Forms: from n/a through 3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/popup-addon-for-ninja-forms/vulnerability/wordpress-popup-addon-for-ninja-forms-plug
stack.com/database/wordpress/plugin/popup-addon-for-ninja-forms/vulnerability/wordpress-popup-addon-for-ninja-forms-plugin-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53280 State: PUBLISHED Published: 2025-06-27T13:21:20.119Z Last Updated: 2025-06-27T13:49:36.369Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: AntoineH Products: Football Pool Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AntoineH Football Pool allows Stored XSS. This issue affects Football Pool: from n/a through 2.12.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/football-pool/vulnerability/wordpress-football-pool-plugin-2-12-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53281 State: PUBLISHED Published: 2025-06-27T13:21:20.736Z Last Updated: 2025-06-27T13:49:20.158Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: WPBean Products: WPB Category Slider for WooCommerce Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPBean WPB Category Slider for WooCommerce allows PHP Local File Inclusion. This issue affects WPB Category Slider for WooCommerce: from n/a through 1.71. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpb-woocommerce-category-sl
tes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpb-woocommerce-category-slider/vulnerability/wordpress-wpb-category-slider-for-woocommerce-plugin-1-71-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-53282 State: PUBLISHED Published: 2025-06-27T13:21:21.314Z Last Updated: 2025-06-27T13:49:00.746Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: aviplugins.com Products: Thumbnail Editor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aviplugins.com Thumbnail Editor allows Stored XSS. This issue affects Thumbnail Editor: from n/a through 2.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/thumbnail-editor/vulnerability/wordpress-thumbnail-editor-plugin-2-3-3-cross-site-scripting-xss-vu
base/wordpress/plugin/thumbnail-editor/vulnerability/wordpress-thumbnail-editor-plugin-2-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53283 State: PUBLISHED Published: 2025-11-06T15:54:03.506Z Last Updated: 2025-11-13T10:33:42.350Z Vendors: borisolhor Products: Drop Uploader for CF7 - Drag&Drop File Uploader Addon Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in borisolhor Drop Uploader for CF7 - Drag&Drop File Uploader Addon drop-uploader-for-contact-form-7-dragdrop-file-uploader-addon allows Upload a Web Shell to a Web Server.This issue affects Drop Uploader for CF7 - Drag&Drop File Uploader Addon: from n/a through <= 2.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/drop-uploade
Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/drop-uploader-for-contact-form-7-dragdrop-file-uploader-addon/vulnerability/wordpress-drop-uploader-for-cf7-drag-drop-file-uploader-addon-plugin-2-4-1-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-53284 State: PUBLISHED Published: 2025-06-27T13:21:21.898Z Last Updated: 2025-06-27T13:48:45.389Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: pankaj.sakaria Products: CMS Blocks Problem Types: CWE-862 Description: Missing Authorization vulnerability in pankaj.sakaria CMS Blocks allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CMS Blocks: from n/a through 1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cms-blocks/vulnerability/wordpress-cms-blocks-plugin-1-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53285 State: PUBLISHED Published: 2025-06-27T13:21:22.551Z Last Updated: 2025-06-27T13:48:28.733Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: The Website Flip Products: Add &amp; Replace Affiliate Links for Amazon Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in The Website Flip Add &amp; Replace Affiliate Links for Amazon allows Stored XSS. This issue affects Add &amp; Replace Affiliate Links for Amazon: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/add-replac
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/add-replace-affiliate-links-for-amazon/vulnerability/wordpress-add-replace-affiliate-links-for-amazon-plugin-1-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53286 State: PUBLISHED Published: 2025-11-06T15:54:04.283Z Last Updated: 2025-11-13T10:33:42.363Z Vendors: Jhainey Milevis Products: Dropify Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jhainey Milevis Dropify wc-dropi-integration allows Reflected XSS.This issue affects Dropify: from n/a through <= 4.6.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wc-dropi-integration/vulnerability/wordpress-dropify-plugin-4-6-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53287 State: PUBLISHED Published: 2025-06-27T13:21:23.212Z Last Updated: 2025-06-27T13:48:12.868Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Robert Cummings Products: Quick Favicon Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robert Cummings Quick Favicon allows Stored XSS. This issue affects Quick Favicon: from n/a through 0.22.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/quick-favicon/vulnerability/wordpress-quick-favicon-plugin-0-22-8-cross-site-scripting-xss-vulnerability
ordpress/plugin/quick-favicon/vulnerability/wordpress-quick-favicon-plugin-0-22-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53288 State: PUBLISHED Published: 2025-06-27T13:21:23.887Z Last Updated: 2025-06-27T14:43:37.031Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Adrian Ladó Products: PlatiOnline Payments Problem Types: CWE-862 Description: Missing Authorization vulnerability in Adrian Ladó PlatiOnline Payments allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PlatiOnline Payments: from n/a through 6.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/plationline/vulnerability/wordpress-plationline-payments-plugin-6-3-2-broken-access-control-vulnerab
se/wordpress/plugin/plationline/vulnerability/wordpress-plationline-payments-plugin-6-3-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53289 State: PUBLISHED Published: 2025-08-28T12:37:26.507Z Last Updated: 2025-08-28T14:44:11.860Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Jason Products: Theme Blvd Widget Areas Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jason Theme Blvd Widget Areas allows Reflected XSS. This issue affects Theme Blvd Widget Areas: from n/a through 1.3.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/theme-blvd-widget-areas/vulnerability/wordpress-theme-blvd-widget-areas-plugin-1-3-0-cross-sit
database/wordpress/plugin/theme-blvd-widget-areas/vulnerability/wordpress-theme-blvd-widget-areas-plugin-1-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53290 State: PUBLISHED Published: 2025-06-27T13:21:24.708Z Last Updated: 2025-06-27T14:43:24.147Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: MS Products: WP Visual Sitemap Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MS WP Visual Sitemap allows Stored XSS. This issue affects WP Visual Sitemap: from n/a through 1.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-visual-sitemap/vulnerability/wordpress-wp-visual-sitemap-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=c
/wp-visual-sitemap/vulnerability/wordpress-wp-visual-sitemap-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53291 State: PUBLISHED Published: 2025-09-09T16:25:34.828Z Last Updated: 2025-09-09T18:40:35.664Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: spoddev2021 Products: Spreadconnect Problem Types: CWE-862 Description: Missing Authorization vulnerability in spoddev2021 Spreadconnect. This issue affects Spreadconnect: from n/a through 2.1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wc-spod/vulnerability/wordpress-spreadconnect-plugin-2-1-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53292 State: PUBLISHED Published: 2025-06-27T13:21:25.342Z Last Updated: 2025-06-27T14:43:14.438Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: samsk Products: WP DataTable Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in samsk WP DataTable allows DOM-Based XSS. This issue affects WP DataTable: from n/a through 0.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-datatable/vulnerability/wordpress-wp-datatable-plugin-0-2-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53293 State: PUBLISHED Published: 2025-06-27T13:21:25.951Z Last Updated: 2025-06-27T17:28:16.233Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Morten Dalgaard Johansen Products: Dashboard Widget Sidebar Problem Types: CWE-862 Description: Missing Authorization vulnerability in Morten Dalgaard Johansen Dashboard Widget Sidebar allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Dashboard Widget Sidebar: from n/a through 1.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/dashboard-widget-sidebar/vulnerability/wordpress-dashboard-wid
ences: - https://patchstack.com/database/wordpress/plugin/dashboard-widget-sidebar/vulnerability/wordpress-dashboard-widget-sidebar-plugin-1-2-3-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53294 State: PUBLISHED Published: 2025-06-27T13:21:26.556Z Last Updated: 2025-06-27T14:43:08.347Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Smart Agenda Products: Smart Agenda Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Smart Agenda Smart Agenda allows Stored XSS. This issue affects Smart Agenda: from n/a through 4.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smart-agenda-prise-de-rendez-vous-en-ligne/vulnerability/wordpress-smart-agenda-plugin-4-9-cross-site-scripting-xss-
gin/smart-agenda-prise-de-rendez-vous-en-ligne/vulnerability/wordpress-smart-agenda-plugin-4-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53295 State: PUBLISHED Published: 2025-06-27T13:21:27.192Z Last Updated: 2025-06-27T14:42:57.948Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: iCount Products: iCount Payment Gateway Problem Types: CWE-862 Description: Missing Authorization vulnerability in iCount iCount Payment Gateway allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects iCount Payment Gateway: from n/a through 2.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/icount/vulnerability/wordpress-icount-payment-gateway-plugin-2-0-6-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53296 State: PUBLISHED Published: 2025-06-27T13:21:27.832Z Last Updated: 2025-06-27T13:47:52.808Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: ecoal95 Products: EC Stars Rating Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ecoal95 EC Stars Rating allows Stored XSS. This issue affects EC Stars Rating: from n/a through 1.0.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ec-stars-rating/vulnerability/wordpress-ec-stars-rating-plugin-1-0-11-cross-site-scripting-xss-vulnerability?_s_id
lugin/ec-stars-rating/vulnerability/wordpress-ec-stars-rating-plugin-1-0-11-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53297 State: PUBLISHED Published: 2025-10-22T14:32:31.023Z Last Updated: 2025-11-13T10:33:42.273Z Vendors: AA-Team Products: Woocommerce Envato Affiliates Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA-Team Woocommerce Envato Affiliates wooenvato allows Reflected XSS.This issue affects Woocommerce Envato Affiliates: from n/a through <= 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/wooenvato/vulnerability/wordpress-woocommerce-envato-affiliates-plugin-1-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53298 State: PUBLISHED Published: 2025-06-27T13:21:28.458Z Last Updated: 2025-06-27T13:47:30.278Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: gioni Products: Plugin Inspector Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gioni Plugin Inspector allows Path Traversal. This issue affects Plugin Inspector: from n/a through 1.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/plugin-inspector/vulnerability/wordpress-plugin-inspector-plugin-1-5-arbitrary-file-download-vulnerability?_s_id=cve
CVE ID: CVE-2025-53299 State: PUBLISHED Published: 2025-08-20T08:03:15.926Z Last Updated: 2025-08-20T17:54:14.912Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ThemeMakers Products: ThemeMakers Visual Content Composer Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in ThemeMakers ThemeMakers Visual Content Composer allows Object Injection. This issue affects ThemeMakers Visual Content Composer: from n/a through 1.5.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/tmm_content_composer/vulnerability/wordpress-thememakers-visual-content-composer-plugin-1
.com/database/wordpress/plugin/tmm_content_composer/vulnerability/wordpress-thememakers-visual-content-composer-plugin-1-5-8-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-53300 State: PUBLISHED Published: 2025-06-27T13:21:29.043Z Last Updated: 2025-06-27T13:47:08.761Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: douglaskarr Products: Podcast Feed Player Widget and Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in douglaskarr Podcast Feed Player Widget and Shortcode allows Stored XSS. This issue affects Podcast Feed Player Widget and Shortcode: from n/a through 2.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/podcast-feed-player-widget/vulne
- CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/podcast-feed-player-widget/vulnerability/wordpress-podcast-feed-player-widget-and-shortcode-plugin-2-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53301 State: PUBLISHED Published: 2025-06-27T13:21:29.640Z Last Updated: 2025-06-27T13:46:46.347Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Theme Junkie Products: Theme Junkie Team Content Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme Junkie Theme Junkie Team Content allows DOM-Based XSS. This issue affects Theme Junkie Team Content: from n/a through 0.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/theme-junkie-team-content/vulnerability/wordpress-theme-junkie-team-cont
ttps://patchstack.com/database/wordpress/plugin/theme-junkie-team-content/vulnerability/wordpress-theme-junkie-team-content-plugin-0-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-53303 State: PUBLISHED Published: 2025-09-09T16:26:05.281Z Last Updated: 2025-09-09T18:40:03.436Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ThemeMove Products: ThemeMove Core Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in ThemeMove ThemeMove Core allows Object Injection. This issue affects ThemeMove Core: from n/a through 1.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/thememove-core/vulnerability/wordpress-thememove-core-plugin-1-4-2-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-53304 State: PUBLISHED Published: 2025-06-27T13:21:30.285Z Last Updated: 2025-06-27T13:46:29.610Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Rohil Products: Contact Form &#8211; 7 : Hide Success Message Problem Types: CWE-862 Description: Missing Authorization vulnerability in Rohil Contact Form &#8211; 7 : Hide Success Message allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Contact Form &#8211; 7 : Hide Success Message: from n/a through 1.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/contact-form-7-hide-success-message/vulnerabi
lnrichment: References: - https://patchstack.com/database/wordpress/plugin/contact-form-7-hide-success-message/vulnerability/wordpress-contact-form-7-hide-success-message-plugin-1-1-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-53305 State: PUBLISHED Published: 2025-06-27T13:21:30.908Z Last Updated: 2025-06-27T13:46:11.592Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: lucidcrew Products: WP Forum Server Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in lucidcrew WP Forum Server allows Stored XSS. This issue affects WP Forum Server: from n/a through 1.8.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/forum-server/vulnerability/wordpress-wp-forum-server-plugin-1-8-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-53306 State: PUBLISHED Published: 2025-06-27T13:21:31.643Z Last Updated: 2025-06-27T17:28:10.179Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: lucidcrew Products: WP Forum Server Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in lucidcrew WP Forum Server allows SQL Injection. This issue affects WP Forum Server: from n/a through 1.8.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/forum-server/vulnerability/wordpress-wp-forum-server-plugin-1-8-2-sql-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-53307 State: PUBLISHED Published: 2025-09-05T16:15:40.336Z Last Updated: 2025-09-05T18:19:45.480Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Brent Jett Products: Assistant Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brent Jett Assistant allows Reflected XSS. This issue affects Assistant: from n/a through 1.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/assistant/vulnerability/wordpress-assistant-plugin-1-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve