Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
m/database/wordpress/plugin/theatre/vulnerability/wordpress-theater-for-wordpress-plugin-0-18-7-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31847 State: PUBLISHED Published: 2025-04-01T14:51:58.225Z Last Updated: 2025-04-01T16:03:14.729Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: themelooks Products: mFolio Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themelooks mFolio Lite allows DOM-Based XSS. This issue affects mFolio Lite: from n/a through 1.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/mfolio-lite/vulnerability/wordpress-mfolio-lite-plugin-1-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31848 State: PUBLISHED Published: 2025-04-01T14:51:58.801Z Last Updated: 2025-04-01T16:02:36.292Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: WPFactory Products: WordPress Adverts Plugin Problem Types: CWE-862 Description: Missing Authorization vulnerability in WPFactory WordPress Adverts Plugin allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WordPress Adverts Plugin: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/adverts-click-tracker/vulnerability/wordpress-wordpress-adverts-plugin-plugin-1-4-broken-acces
database/wordpress/plugin/adverts-click-tracker/vulnerability/wordpress-wordpress-adverts-plugin-plugin-1-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31849 State: PUBLISHED Published: 2025-04-01T14:51:59.314Z Last Updated: 2025-04-01T16:01:49.833Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: fbtemplates Products: Nemesis All-in-One Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fbtemplates Nemesis All-in-One allows Stored XSS. This issue affects Nemesis All-in-One: from n/a through 1.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/nemesis-all-in-one/vulnerability/wordpress-nemesis-all-in-one-newspaper-builder-elementor-extentio
base/wordpress/plugin/nemesis-all-in-one/vulnerability/wordpress-nemesis-all-in-one-newspaper-builder-elementor-extention-plugin-1-1-0-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31850 State: PUBLISHED Published: 2025-04-01T14:51:59.841Z Last Updated: 2025-04-01T16:01:17.506Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: RedefiningTheWeb Products: PDF Generator Addon for Elementor Page Builder Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RedefiningTheWeb PDF Generator Addon for Elementor Page Builder allows Stored XSS. This issue affects PDF Generator Addon for Elementor Page Builder: from n/a through 1.7.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pdf-
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/pdf-generator-addon-for-elementor-page-builder/vulnerability/wordpress-pdf-generator-addon-for-elementor-page-builder-plugin-1-7-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31851 State: PUBLISHED Published: 2025-04-01T14:52:00.517Z Last Updated: 2025-04-01T15:44:17.953Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: markkinchin Products: Beds24 Online Booking Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in markkinchin Beds24 Online Booking allows Stored XSS. This issue affects Beds24 Online Booking: from n/a through 2.0.26. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/beds24-online-booking/vulnerability/wordpress-beds24-online-booking-plugin-2-0-26-cross-
k.com/database/wordpress/plugin/beds24-online-booking/vulnerability/wordpress-beds24-online-booking-plugin-2-0-26-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31852 State: PUBLISHED Published: 2025-04-01T14:52:01.160Z Last Updated: 2025-04-01T15:43:54.236Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: N-Media Products: Bulk Product Sync Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in N-Media Bulk Product Sync allows Cross Site Request Forgery. This issue affects Bulk Product Sync: from n/a through 8.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sync-wc-google/vulnerability/wordpress-bulk-product-sync-plugin-8-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31853 State: PUBLISHED Published: 2025-04-01T14:52:01.722Z Last Updated: 2025-04-01T15:43:37.193Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Erez Hadas-Sonnenschein Products: Smartarget Popup Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Erez Hadas-Sonnenschein Smartarget Popup allows Stored XSS. This issue affects Smartarget Popup: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smartarget-popup/vulnerability/wordpress-smartarget-popup-plugin-1-4-cross-site-sc
chstack.com/database/wordpress/plugin/smartarget-popup/vulnerability/wordpress-smartarget-popup-plugin-1-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31854 State: PUBLISHED Published: 2025-04-01T14:52:02.316Z Last Updated: 2025-04-01T15:43:20.001Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Sharaz Shahid Products: Simple Sticky Add To Cart For WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Sharaz Shahid Simple Sticky Add To Cart For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple Sticky Add To Cart For WooCommerce: from n/a through 1.4.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sticky-add-to-cart-woo/vulnerabil
CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sticky-add-to-cart-woo/vulnerability/wordpress-simple-sticky-add-to-cart-for-woocommerce-plugin-1-4-5-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31855 State: PUBLISHED Published: 2025-04-01T14:52:02.903Z Last Updated: 2025-04-01T16:23:43.254Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: softnwords Products: SMM API Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in softnwords SMM API allows Stored XSS. This issue affects SMM API: from n/a through 6.0.27. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/smm-api/vulnerability/wordpress-smm-api-plugin-6-0-27-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31856 State: PUBLISHED Published: 2025-04-01T14:52:03.675Z Last Updated: 2025-04-01T16:22:36.286Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: brainvireinfo Products: Export All Post Meta Problem Types: CWE-862 Description: Missing Authorization vulnerability in brainvireinfo Export All Post Meta allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Export All Post Meta: from n/a through 1.2.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/export-all-post-meta/vulnerability/wordpress-export-all-post-meta-plugin-1-2-1-broken-access-control-vul
ordpress/plugin/export-all-post-meta/vulnerability/wordpress-export-all-post-meta-plugin-1-2-1-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31857 State: PUBLISHED Published: 2025-04-01T14:52:04.221Z Last Updated: 2025-04-01T16:22:17.741Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: wpWax Products: Directorist AddonsKit for Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Directorist AddonsKit for Elementor allows Stored XSS. This issue affects Directorist AddonsKit for Elementor: from n/a through 1.1.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/addonskit-for-elementor/vulnerability/wordpress-directorist
ferences: - https://patchstack.com/database/wordpress/plugin/addonskit-for-elementor/vulnerability/wordpress-directorist-addonskit-for-elementor-plugin-1-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31858 State: PUBLISHED Published: 2025-04-03T13:27:14.992Z Last Updated: 2025-04-03T18:39:01.100Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: matthewrubin Products: Local Magic Problem Types: CWE-862 Description: Missing Authorization vulnerability in matthewrubin Local Magic allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Local Magic: from n/a through 2.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/local-magic/vulnerability/wordpress-local-magic-plugin-2-6-0-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31859 State: PUBLISHED Published: 2025-04-01T14:52:04.816Z Last Updated: 2025-04-14T11:15:58.412Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Feedbucket Products: Feedbucket – Website Feedback Tool Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Feedbucket Feedbucket – Website Feedback Tool allows Cross Site Request Forgery. This issue affects Feedbucket – Website Feedback Tool: from n/a through 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/feedbucket/vulnerability/wordpress-feedbucket-website-feedback-tool-plugin-1-0-6-cross
ack.com/database/wordpress/plugin/feedbucket/vulnerability/wordpress-feedbucket-website-feedback-tool-plugin-1-0-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-31860 State: PUBLISHED Published: 2025-04-01T14:52:05.352Z Last Updated: 2025-04-01T15:50:39.081Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WPeka Products: WP AdCenter Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPeka WP AdCenter allows Stored XSS. This issue affects WP AdCenter: from n/a through 2.5.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wpadcenter/vulnerability/wordpress-wp-adcenter-plugin-2-5-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31861 State: PUBLISHED Published: 2025-04-01T14:52:05.944Z Last Updated: 2025-04-01T15:50:11.307Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: WPOrbit Support Products: Perfect Font Awesome Integration Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPOrbit Support Perfect Font Awesome Integration allows Stored XSS. This issue affects Perfect Font Awesome Integration: from n/a through 2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/perfect-font-awesome-integration/vulnerability/wor
hment: References: - https://patchstack.com/database/wordpress/plugin/perfect-font-awesome-integration/vulnerability/wordpress-perfect-font-awesome-integration-plugin-2-2-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31862 State: PUBLISHED Published: 2025-04-01T14:52:06.479Z Last Updated: 2025-04-01T15:42:33.694Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: PickPlugins Products: Job Board Manager Problem Types: CWE-862 Description: Missing Authorization vulnerability in PickPlugins Job Board Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Job Board Manager: from n/a through 2.1.60. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/job-board-manager/vulnerability/wordpress-job-board-manager-plugin-2-1-60-broken-access-control-vulnerabilit
ress/plugin/job-board-manager/vulnerability/wordpress-job-board-manager-plugin-2-1-60-broken-access-control-vulnerability-2?_s_id=cve
CVE ID: CVE-2025-31863 State: PUBLISHED Published: 2025-04-01T14:52:07.010Z Last Updated: 2025-04-01T16:00:44.611Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: inspry Products: Agency Toolkit Problem Types: CWE-862 Description: Missing Authorization vulnerability in inspry Agency Toolkit allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Agency Toolkit: from n/a through 1.0.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/agency-toolkit/vulnerability/wordpress-agency-toolkit-plugin-1-0-23-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31864 State: PUBLISHED Published: 2025-04-01T14:52:07.561Z Last Updated: 2025-04-01T16:00:10.923Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Out the Box Products: Beam me up Scotty – Back to Top Button Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Out the Box Beam me up Scotty – Back to Top Button allows Stored XSS. This issue affects Beam me up Scotty – Back to Top Button: from n/a through 1.0.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/beam-me-up-scotty/vulnerability/wordp
A ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/beam-me-up-scotty/vulnerability/wordpress-beam-me-up-scotty-back-to-top-button-plugin-1-0-23-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31865 State: PUBLISHED Published: 2025-04-01T14:52:08.115Z Last Updated: 2025-04-01T15:48:21.583Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: CartBoss Products: SMS Abandoned Cart Recovery ✦ CartBoss Problem Types: CWE-862 Description: Missing Authorization vulnerability in CartBoss SMS Abandoned Cart Recovery ✦ CartBoss allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SMS Abandoned Cart Recovery ✦ CartBoss: from n/a through 4.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/cartboss/vulnerability/wordpress-cartboss-plugin-4-1
ent: References: - https://patchstack.com/database/wordpress/plugin/cartboss/vulnerability/wordpress-cartboss-plugin-4-1-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31866 State: PUBLISHED Published: 2025-04-01T14:52:08.647Z Last Updated: 2025-04-01T15:48:02.650Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Ship Depot Products: ShipDepot for WooCommerce Problem Types: CWE-862 Description: Missing Authorization vulnerability in Ship Depot ShipDepot for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ShipDepot for WooCommerce: from n/a through 1.2.19. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ship-depot/vulnerability/wordpress-shipdepot-for-woocommerce-plugin-1-2-19-broken-acce
ack.com/database/wordpress/plugin/ship-depot/vulnerability/wordpress-shipdepot-for-woocommerce-plugin-1-2-19-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31867 State: PUBLISHED Published: 2025-04-01T14:52:09.167Z Last Updated: 2025-04-01T15:47:44.668Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: JoomSky Products: JS Job Manager Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JS Job Manager: from n/a through 2.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/js-jobs/vulnerability/wordpress-js-job-manager-plugin-2-0-2-insecure-direct-object-references-idor-
ase/wordpress/plugin/js-jobs/vulnerability/wordpress-js-job-manager-plugin-2-0-2-insecure-direct-object-references-idor-vulnerability?_s_id=cve
CVE ID: CVE-2025-31868 State: PUBLISHED Published: 2025-04-01T14:52:09.685Z Last Updated: 2025-04-01T15:47:29.521Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: JoomSky Products: JS Job Manager Problem Types: CWE-862 Description: Missing Authorization vulnerability in JoomSky JS Job Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JS Job Manager: from n/a through 2.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/js-jobs/vulnerability/wordpress-js-job-manager-plugin-2-0-2-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31869 State: PUBLISHED Published: 2025-04-01T14:52:10.255Z Last Updated: 2025-04-01T15:45:34.046Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Modernaweb Studio Products: Black Widgets For Elementor Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Modernaweb Studio Black Widgets For Elementor allows Stored XSS. This issue affects Black Widgets For Elementor: from n/a through 1.3.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/black-widgets/vulnerability/wordpress-black-widgets-for-ele
ferences: - https://patchstack.com/database/wordpress/plugin/black-widgets/vulnerability/wordpress-black-widgets-for-elementor-plugin-1-3-9-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31870 State: PUBLISHED Published: 2025-04-01T14:52:10.777Z Last Updated: 2025-04-01T15:45:07.126Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: EXEIdeas International Products: WP AutoKeyword Problem Types: CWE-862 Description: Missing Authorization vulnerability in EXEIdeas International WP AutoKeyword allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP AutoKeyword: from n/a through 1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-autokeyword/vulnerability/wordpress-wp-autokeyword-plugin-1-0-arbitrary-content-deletion-vulner
base/wordpress/plugin/wp-autokeyword/vulnerability/wordpress-wp-autokeyword-plugin-1-0-arbitrary-content-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-31871 State: PUBLISHED Published: 2025-04-01T14:52:11.332Z Last Updated: 2025-04-01T15:44:50.191Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: Galaxy Weblinks Products: WP Clone any post type Problem Types: CWE-601 Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Galaxy Weblinks WP Clone any post type allows Phishing. This issue affects WP Clone any post type: from n/a through 3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-clone-any-post-type/vulnerability/wordpress-wp-clone-any-post-type-plugin-3-4-open-redirect-vulnerability?_s_id
lugin/wp-clone-any-post-type/vulnerability/wordpress-wp-clone-any-post-type-plugin-3-4-open-redirect-vulnerability?_s_id=cve
CVE ID: CVE-2025-31872 State: PUBLISHED Published: 2025-04-01T14:52:11.863Z Last Updated: 2025-04-01T15:47:55.491Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Galaxy Weblinks Products: WP Clone any post type Problem Types: CWE-862 Description: Missing Authorization vulnerability in Galaxy Weblinks WP Clone any post type allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Clone any post type: from n/a through 3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-clone-any-post-type/vulnerability/wordpress-wp-clone-any-post-type-plugin-3-4-broken-
k.com/database/wordpress/plugin/wp-clone-any-post-type/vulnerability/wordpress-wp-clone-any-post-type-plugin-3-4-broken-access-control-vulnerability?_s_id=cve
CVE ID: CVE-2025-31873 State: PUBLISHED Published: 2025-04-01T14:52:12.411Z Last Updated: 2025-04-01T15:38:34.382Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: sheetdb Products: SheetDB Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sheetdb SheetDB allows Stored XSS. This issue affects SheetDB: from n/a through 1.3.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/sheetdb/vulnerability/wordpress-sheetdb-plugin-1-3-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31874 State: PUBLISHED Published: 2025-04-01T14:52:12.963Z Last Updated: 2025-04-01T15:42:28.581Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Ajay Products: WebberZone Snippetz Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ajay WebberZone Snippetz allows Stored XSS. This issue affects WebberZone Snippetz: from n/a through 2.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/add-to-all/vulnerability/wordpress-webberzone-snippetz-plugin-2-1-0-cross-site-scripting-xss-vulnerability?_s
ess/plugin/add-to-all/vulnerability/wordpress-webberzone-snippetz-plugin-2-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31875 State: PUBLISHED Published: 2025-04-01T14:52:13.492Z Last Updated: 2025-04-01T15:45:30.162Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Pluginic Products: FancyPost Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pluginic FancyPost allows DOM-Based XSS. This issue affects FancyPost: from n/a through 6.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/post-block/vulnerability/wordpress-fancypost-plugin-6-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-31876 State: PUBLISHED Published: 2025-04-03T13:27:15.172Z Last Updated: 2025-04-03T18:36:08.170Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: gunnarpayday Products: Payday Problem Types: CWE-862 Description: Missing Authorization vulnerability in gunnarpayday Payday allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Payday: from n/a through 3.3.12. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/payday/vulnerability/wordpress-payday-plugin-3-3-12-broken-access-control-vulnerability?_s_id=cve