Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-32481 State: PUBLISHED Published: 2025-04-09T16:09:53.874Z Last Updated: 2025-04-09T17:58:53.765Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ninotheme Products: Nino Social Connect Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ninotheme Nino Social Connect allows Stored XSS. This issue affects Nino Social Connect: from n/a through 2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/nino-social-connect/vulnerability/wordpress-nino-social-connect-plugin-2-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32482 State: PUBLISHED Published: 2025-04-09T16:09:53.272Z Last Updated: 2025-04-09T18:16:19.587Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: quanganhdo Products: Custom Smilies Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in quanganhdo Custom Smilies allows Stored XSS. This issue affects Custom Smilies: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/custom-smilies/vulnerability/wordpress-custom-smilies-plugin-1-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32483 State: PUBLISHED Published: 2025-04-09T16:09:52.604Z Last Updated: 2025-04-09T18:19:47.877Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Scott Salisbury Products: Request Call Back Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Salisbury Request Call Back allows Stored XSS. This issue affects Request Call Back: from n/a through 1.4.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/request-call-back/vulnerability/wordpress-request-call-back-1-4-1-cross-site-scripting-xss-vu
/database/wordpress/plugin/request-call-back/vulnerability/wordpress-request-call-back-1-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32484 State: PUBLISHED Published: 2025-04-09T16:09:51.981Z Last Updated: 2025-04-09T18:20:05.664Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Mathieu Chartier Products: WP-Planification Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Mathieu Chartier WP-Planification allows Stored XSS. This issue affects WP-Planification: from n/a through 2.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-planification/vulnerability/wordpress-wp-planification-wp-planning-plugin-2-3-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32485 State: PUBLISHED Published: 2025-04-09T16:09:51.357Z Last Updated: 2025-04-09T18:20:31.326Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Bjoern Products: WP Performance Pack Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Bjoern WP Performance Pack allows Cross Site Request Forgery. This issue affects WP Performance Pack: from n/a through 2.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-performance-pack/vulnerability/wordpress-wp-performance-pack-2-5-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-32486 State: PUBLISHED Published: 2025-09-09T16:25:32.379Z Last Updated: 2025-09-09T18:40:58.812Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Hossein Products: Material Dashboard Problem Types: CWE-640 Description: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hossein Material Dashboard. This issue affects Material Dashboard: from n/a through 1.4.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/material-dashboard/vulnerability/wordpress-material-dashboard-1-4-6-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-32487 State: PUBLISHED Published: 2025-04-09T16:09:50.757Z Last Updated: 2025-04-09T18:21:03.237Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Joe Products: Waymark Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Joe Waymark allows Server Side Request Forgery. This issue affects Waymark: from n/a through 1.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/waymark/vulnerability/wordpress-waymark-1-5-2-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-32488 State: PUBLISHED Published: 2025-04-09T16:09:50.179Z Last Updated: 2025-04-09T18:21:51.154Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: آریا وردپرس Products: Aria Font Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in آریا وردپرس Aria Font allows Stored XSS. This issue affects Aria Font: from n/a through 1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/aria-font/vulnerability/wordpress-aria-font-1-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32489 State: PUBLISHED Published: 2025-04-09T16:09:49.585Z Last Updated: 2025-04-09T18:22:19.448Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Tim Products: Wetterwarner Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim Wetterwarner allows Stored XSS. This issue affects Wetterwarner: from n/a through 2.7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wetterwarner/vulnerability/wordpress-wetterwarner-2-7-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32490 State: PUBLISHED Published: 2025-04-17T15:47:49.951Z Last Updated: 2025-04-17T18:23:42.056Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: WebsiteDefender Products: wp secure Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebsiteDefender wp secure allows Stored XSS. This issue affects wp secure: from n/a through 1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wp-secure-by-sitesecuritymonitorcom/vulnerability/wordpress-wp-secure-1-2-cross-site-scripting-xss-vulnerability?_s_id=cv
p-secure-by-sitesecuritymonitorcom/vulnerability/wordpress-wp-secure-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32491 State: PUBLISHED Published: 2025-04-11T08:42:51.818Z Last Updated: 2025-04-11T13:53:37.803Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Rankology Products: Rankology SEO &#8211; On-site SEO Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in Rankology Rankology SEO &#8211; On-site SEO allows Privilege Escalation. This issue affects Rankology SEO &#8211; On-site SEO: from n/a through 2.2.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rankology-seo-all-in-one-seo-analytics/vulnerability/wordpress-rankology-seo-on-site-seo-2-2-3-pri
base/wordpress/plugin/rankology-seo-all-in-one-seo-analytics/vulnerability/wordpress-rankology-seo-on-site-seo-2-2-3-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-32492 State: PUBLISHED Published: 2025-04-09T16:09:48.852Z Last Updated: 2025-04-09T18:22:51.686Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Eliot Akira Products: Admin Menu Post List Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eliot Akira Admin Menu Post List allows Stored XSS. This issue affects Admin Menu Post List: from n/a through 2.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/admin-menu-post-list/vulnerability/wordpress-admin-menu-post-list-2-0-7-cross-site-scripting
m/database/wordpress/plugin/admin-menu-post-list/vulnerability/wordpress-admin-menu-post-list-2-0-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32493 State: PUBLISHED Published: 2025-04-09T16:09:48.180Z Last Updated: 2025-04-09T18:23:10.826Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: VibeThemes Products: BP Social Connect Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes BP Social Connect allows Stored XSS. This issue affects BP Social Connect: from n/a through 1.6.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/bp-social-connect/vulnerability/wordpress-bp-social-connect-1-6-2-cross-site-scripting-xss-vulnerabilit
wordpress/plugin/bp-social-connect/vulnerability/wordpress-bp-social-connect-1-6-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32494 State: PUBLISHED Published: 2025-04-09T16:09:47.607Z Last Updated: 2025-04-09T18:23:25.660Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: bozdoz Products: reCAPTCHA Jetpack Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in bozdoz reCAPTCHA Jetpack allows Cross Site Request Forgery. This issue affects reCAPTCHA Jetpack: from n/a through 0.2.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/recaptcha-jetpack/vulnerability/wordpress-recaptcha-jetpack-0-2-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-32495 State: PUBLISHED Published: 2025-04-09T16:09:47.006Z Last Updated: 2025-04-09T18:50:49.434Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Joe Products: Waymark Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Waymark allows Stored XSS. This issue affects Waymark: from n/a through 1.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/waymark/vulnerability/wordpress-waymark-1-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32496 State: PUBLISHED Published: 2025-04-09T16:09:46.419Z Last Updated: 2025-04-09T17:59:06.606Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Uncodethemes Products: Ultra Demo Importer Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Uncodethemes Ultra Demo Importer allows Upload a Web Shell to a Web Server. This issue affects Ultra Demo Importer: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ut-demo-importer/vulnerability/wordpress-ultra-demo-importer-plugin-1-0-5-csrf-to-rce-vulnerability?_s_id=cve
CVE ID: CVE-2025-32497 State: PUBLISHED Published: 2025-04-09T16:09:45.802Z Last Updated: 2025-04-09T17:59:18.392Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: squiter Products: Spoiler Block Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in squiter Spoiler Block allows Stored XSS. This issue affects Spoiler Block: from n/a through 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/spoiler-block/vulnerability/wordpress-spoiler-block-plugin-1-7-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32498 State: PUBLISHED Published: 2025-04-09T16:09:45.214Z Last Updated: 2025-04-09T17:59:30.732Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: oleglark Products: VKontakte Cross-Post Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in oleglark VKontakte Cross-Post allows Stored XSS. This issue affects VKontakte Cross-Post: from n/a through 0.3.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/vkontakte-cross-post/vulnerability/wordpress-vkontakte-cross-post-plugin-0-3-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32499 State: PUBLISHED Published: 2025-04-09T16:09:44.529Z Last Updated: 2025-04-09T17:59:44.088Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: wpWax Products: Logo Showcase Ultimate Problem Types: CWE-98 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpWax Logo Showcase Ultimate allows PHP Local File Inclusion. This issue affects Logo Showcase Ultimate: from n/a through 1.4.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/logo-showcase-ultimate/vulnerability/wordpress-logo-showcase-ulti
es: - https://patchstack.com/database/wordpress/plugin/logo-showcase-ultimate/vulnerability/wordpress-logo-showcase-ultimate-plugin-1-4-4-local-file-inclusion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32500 State: PUBLISHED Published: 2025-04-09T16:09:43.925Z Last Updated: 2025-04-09T18:00:11.500Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Sudavar Products: Codescar Radio Widget Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Sudavar Codescar Radio Widget allows Stored XSS. This issue affects Codescar Radio Widget: from n/a through 0.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/codescar-radio-widget/vulnerability/wordpress-codescar-radio-widget-plugin-0-4-2-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32501 State: PUBLISHED Published: 2025-04-09T16:09:43.309Z Last Updated: 2025-06-11T16:25:14.514Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: dimafreund Products: RentSyst Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in dimafreund RentSyst allows Stored XSS.This issue affects RentSyst: from n/a through 2.0.92. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/rentsyst/vulnerability/wordpress-rentsyst-plugin-2-0-72-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32502 State: PUBLISHED Published: 2025-04-09T16:09:42.675Z Last Updated: 2025-04-09T18:00:41.294Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: lemmentwickler Products: ePaper Lister for Yumpu Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in lemmentwickler ePaper Lister for Yumpu allows Stored XSS. This issue affects ePaper Lister for Yumpu: from n/a through 1.4.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/magazine-lister-for-yumpu/vulnerability/wordpress-epaper-lister-for-yumpu-plugin-1-4-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32503 State: PUBLISHED Published: 2025-04-09T16:09:42.039Z Last Updated: 2025-04-09T18:51:03.860Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Jose Conti Products: Link Shield Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jose Conti Link Shield allows Stored XSS. This issue affects Link Shield: from n/a through 0.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/link-shield/vulnerability/wordpress-link-shield-plugin-0-5-4-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cv
k-shield/vulnerability/wordpress-link-shield-plugin-0-5-4-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32504 State: PUBLISHED Published: 2025-04-17T15:47:49.364Z Last Updated: 2025-04-17T18:23:50.463Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: silvasoft Products: Silvasoft boekhouden Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in silvasoft Silvasoft boekhouden allows Reflected XSS. This issue affects Silvasoft boekhouden: from n/a through 3.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/silvasoft-boekhouden/vulnerability/wordpress-silvasoft-boekhouden-plugin-3-0-5-reflected-cross-
atabase/wordpress/plugin/silvasoft-boekhouden/vulnerability/wordpress-silvasoft-boekhouden-plugin-3-0-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32505 State: PUBLISHED Published: 2025-04-09T16:09:41.314Z Last Updated: 2025-04-09T18:51:23.822Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: SCAND Products: MultiMailer Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in SCAND MultiMailer allows Stored XSS. This issue affects MultiMailer: from n/a through 1.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/scand-multi-mailer/vulnerability/wordpress-multimailer-plugin-1-0-3-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32506 State: PUBLISHED Published: 2025-04-17T15:47:48.768Z Last Updated: 2025-04-17T18:23:57.296Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: BenDlz Products: AT Internet SmartTag Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BenDlz AT Internet SmartTag allows Reflected XSS. This issue affects AT Internet SmartTag: from n/a through 0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/at-internet/vulnerability/wordpress-at-internet-smarttag-plugin-0-2-reflected-cross-site-scripting-xss-
wordpress/plugin/at-internet/vulnerability/wordpress-at-internet-smarttag-plugin-0-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32507 State: PUBLISHED Published: 2025-04-17T15:47:48.145Z Last Updated: 2025-04-17T18:24:05.091Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Aakif Kadiwala Products: Event Espresso – Custom Email Template Shortcode Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aakif Kadiwala Event Espresso – Custom Email Template Shortcode allows Reflected XSS. This issue affects Event Espresso – Custom Email Template Shortcode: from n/a through 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/e
0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/email-shortcode/vulnerability/wordpress-event-espresso-plugin-1-0-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32508 State: PUBLISHED Published: 2025-04-17T15:47:47.488Z Last Updated: 2025-04-17T18:24:13.554Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: ComMotion Products: Course Booking System Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ComMotion Course Booking System allows Reflected XSS. This issue affects Course Booking System: from n/a through 6.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/course-booking-system/vulnerability/wordpress-course-booking-system-plugin-6-0-7-cross-site-
m/database/wordpress/plugin/course-booking-system/vulnerability/wordpress-course-booking-system-plugin-6-0-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32509 State: PUBLISHED Published: 2025-04-11T08:42:52.035Z Last Updated: 2025-04-11T13:53:28.439Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: WPMinds Products: Simple WP Events Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMinds Simple WP Events allows Path Traversal. This issue affects Simple WP Events: from n/a through 1.8.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/simple-wp-events/vulnerability/wordpress-simple-wp-events-plugin-1-8-17-arbitrary-file-deletion-vulnerability?_s_id
ugin/simple-wp-events/vulnerability/wordpress-simple-wp-events-plugin-1-8-17-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE ID: CVE-2025-32510 State: PUBLISHED Published: 2025-06-17T15:01:36.611Z Last Updated: 2025-07-30T05:23:57.388Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Ovatheme Products: Ovatheme Events Manager Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Ovatheme Ovatheme Events Manager allows Using Malicious Files.This issue affects Ovatheme Events Manager: from n/a through 1.8.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/ova-events-manager/vulnerability/wordpress-ovatheme-events-manager-plugin-1-7-5-arbitrary-file-upload-vulnerabilit
lugin/ova-events-manager/vulnerability/wordpress-ovatheme-events-manager-plugin-1-7-5-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-32511 State: PUBLISHED Published: 2025-04-17T15:47:46.894Z Last Updated: 2025-04-17T18:24:22.273Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Excellent Dynamics Products: Make Email Customizer for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Excellent Dynamics Make Email Customizer for WooCommerce allows Reflected XSS. This issue affects Make Email Customizer for WooCommerce: from n/a through 1.0.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/make-email-customizer-for-
otes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/make-email-customizer-for-woocommerce/vulnerability/wordpress-make-email-customizer-for-woocommerce-plugin-1-0-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-32512 State: PUBLISHED Published: 2025-04-17T15:47:46.259Z Last Updated: 2025-04-17T18:24:29.954Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: revampcrm Products: Revamp CRM for WooCommerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in revampcrm Revamp CRM for WooCommerce allows Reflected XSS. This issue affects Revamp CRM for WooCommerce: from n/a through 1.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/revampcrm-woocommerce/vulnerability/wordpress-revamp-crm-for-woocommerce-plug
//patchstack.com/database/wordpress/plugin/revampcrm-woocommerce/vulnerability/wordpress-revamp-crm-for-woocommerce-plugin-1-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve