deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-52513
Published: 2025-11-04
Description: An issue was discovered in Samsung Mobile Processor Exynos 2400, 1580, 2500. A race condition in the HTS driver results in an out-of-bounds write, leading to a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-52513/
CVE: CVE-2025-54334
Published: 2025-11-04
Description: An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. There is a NULL Pointer Dereference of hdev in the __npu_vertex_bootup function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54334/
CVE: CVE-2025-64318
Published: 2025-11-04
Description: Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before 1.12.1.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-94
References: https://help.salesforce.com/s/articleView?id=005228032&type=1
CVE: CVE-2025-64319
Published: 2025-11-04
Description: Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue affects Mulesoft Anypoint Code Builder: before 1.12.1
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: https://help.salesforce.com/s/articleView?id=005228032&type=1
CVE: CVE-2025-64320
Published: 2025-11-04
Description: Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://help.salesforce.com/s/articleView?id=005228032&type=1
CVE: CVE-2025-64321
Published: 2025-11-04
Description: Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-94
References: https://help.salesforce.com/s/articleView?id=005228032&type=1
CVE: CVE-2025-64322
Published: 2025-11-04
Description: Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: https://help.salesforce.com/s/articleView?id=005228032&type=1
CVE: CVE-2025-23358
Published: 2025-11-04
Description: NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. A successful exploit of this vulnerability might lead to code execution and escalation of privileges.
CVSS Score: 8.2 (HIGH)
CWE: CWE-427
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23358; https://nvidia.custhelp.com/app/answers/detail/a_id/5717; https://www.cve.org/CVERecord?id=CVE-2025-23358
CVE: CVE-2025-33176
Published: 2025-11-04
Description: NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper restriction of communications channels on an adjacent network. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, and information disclosure.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-923
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33176; https://nvidia.custhelp.com/app/answers/detail/a_id/5719; https://www.cve.org/CVERecord?id=CVE-2025-33176
CVE: CVE-2025-49494
Published: 2025-11-04
Description: An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 2100, 1280, 2200, 1330, 1380, 1480, 9110, Modem 5123. Mishandling of an 5G NRMM packet leads to a Denial of Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-49494/
CVE: CVE-2025-54327
Published: 2025-11-04
Description: An issue was discovered in VTS in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1380, W920, W930, W1000. Improper input validation in the VTS driver leads to an arbitrary write.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54327/
CVE: CVE-2025-61431
Published: 2025-11-04
Description: A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMaintenance Infinity and Infinity Zucchetti v4.1 and earlier allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into the pHtmlSource parameter. A vendor fix was released on 2025-06-18.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/alex-xor/8651dbdd413e4fa7240b0ab1b1845d76; https://www.zucchetti.it/
CVE: CVE-2024-56426
Published: 2025-11-04
Description: An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000. The lack of a length check leads to out-of-bounds writes via malformed USB packets to the target.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-56426/
CVE: CVE-2025-27374
Published: 2025-11-04
Description: An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-787
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-27374/
CVE: CVE-2025-32786
Published: 2025-11-04
Description: The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Versions 1.5.0 and below are vulnerable to SQL Injection. This issue is fixed in version 1.5.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/glpi-project/glpi-inventory-plugin/blob/1.5.1/CHANGELOG.md; https://github.com/glpi-project/glpi-inventory-plugin/releases/tag/1.5.1; https://github.com/glpi-project/glpi-inventory-plugin/security/advisories/GHSA-w2cp-r675-6xpq
CVE: CVE-2025-47776
Published: 2025-11-04
Description: Mantis Bug Tracker (MantisBT) is an open source issue tracker. Due to incorrect use of loose (==) instead of strict (===) comparison in the authentication code in versions 2.27.1 and below.PHP type juggling will cause certain MD5 hashes matching scientific notation to be interpreted as numbers. Instances using the MD5 login method allow an attacker who knows the victim's username and has access to an account with a password hash that evaluates to zero to log in without knowing the victim's actual password, by using any other password with a hash that also evaluates to zero This issue is fixed in version 2.27.2.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-305
References: https://github.com/mantisbt/mantisbt/commit/966554a19cf1bdbcfbfb[PII_REDACTED]faa748f9a2; https://github.com/mantisbt/mantisbt/security/advisories/GHSA-4v8w-gg5j-ph37
CVE: CVE-2025-48076
Published: 2025-11-04
Description: Galette is a membership management web application for non profit organizations. Versions 1.1.5.2 and below allow a user to edit a group name and insert an XSS payload. This issue is fixed in version 1.2.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-87, CWE-79
References: https://github.com/galette/galette/security/advisories/GHSA-ccwq-mxx3-chvh
CVE: CVE-2025-48884
Published: 2025-11-04
Description: Galette is a membership management web application for non profit organizations. In versions 1.1.5.2 and below, Galette's Document Type is vulnerable to Cross-site Scripting. This issue is fixed in version 1.2.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://github.com/galette/galette/security/advisories/GHSA-3rc3-rc5x-vmr4
CVE: CVE-2025-52910
Published: 2025-11-04
Description: An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400. A Use-After-Free leads to privilege escalation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-52910/
CVE: CVE-2025-54335
Published: 2025-11-04
Description: An issue was discovered in the GPU driver in Samsung Mobile Processor Exynos 1480, 2400, 1580, 2500. There is a use-after-free in the Xclipse GPU Driver.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://semiconductor.samsung.com/support/quality-support/product-security-updates/; https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-54335/
CVE: CVE-2025-55155
Published: 2025-11-04
Description: Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, when a user edits their profile to change their e-mail address, the system saves it without validating that it actually belongs to the user. This could result in storing an invalid email address, preventing the user from receiving system notifications. Notifications sent to another person's email address could lead to information disclosure. This issue is fixed in version 2.27.2.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-201, CWE-354
References: https://github.com/mantisbt/mantisbt/commit/21e9fbedde8553c29c0d3156e84f78157fc4f22e; https://github.com/mantisbt/mantisbt/security/advisories/GHSA-q747-c74m-69pr; https://mantisbt.org/bugs/view.php?id=36005
CVE: CVE-2025-54496
Published: 2025-11-04
Description: A maliciously crafted project file may cause a heap-based buffer 
overflow in 
Fuji Electric Monitouch V-SFT-6, which may allow the attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://felib.fujielectric.co.jp/en/document_search?tab=software&document1%5B1%5D=M10009&document2%5B1%5D=M20104&product1%5B1%5D=P10003&product2%5B1%5D=P20023&product3%5B1%5D=P30623&product4%5B1%5D=S11133&discontinued%5B1%5D=0&count=20&sort=en_title&page=1&region=en-glb; https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-01.json; https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-01
CVE: CVE-2025-54526
Published: 2025-11-04
Description: Fuji Electric Monitouch V-SFT-6 is vulnerable to a stack-based buffer 
overflow while processing a specially crafted project file, which may 
allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://felib.fujielectric.co.jp/en/document_search?tab=software&document1%5B1%5D=M10009&document2%5B1%5D=M20104&product1%5B1%5D=P10003&product2%5B1%5D=P20023&product3%5B1%5D=P30623&product4%5B1%5D=S11133&discontinued%5B1%5D=0&count=20&sort=en_title&page=1&region=en-glb; https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-01.json; https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-01
CVE: CVE-2025-56230
Published: 2025-11-04
Description: Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component.
CVSS Score: 7.5 (HIGH)
CWE: CWE-599
References: https://www.notion.so/CVE-2025-56230-1a74e9f2a40d80dca0a2d0615dc7ac5a
CVE: CVE-2025-62369
Published: 2025-11-04
Description: Xibo is an open source digital signage platform with a web content management system (CMS). Versions 4.3.0 and below contain a Remote Code Execution vulnerability in the CMS Developer menu's Module Templating functionality, allowing authenticated users with "System -> Add/Edit custom modules and templates" permissions to manipulate Twig filters and execute arbitrary server-side functions as the web server user. This issue is fixed in version 4.3.1. To workaround this issue, use the 4.1 and 4.2 patch commits.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94, CWE-1336
References: https://github.com/xibosignage/xibo-cms/commit/0f4e88396111ea027785a48dd8f5eeb14536bd71; https://github.com/xibosignage/xibo-cms/commit/ecd4f9d2cea739a46756a108a839cac80f65cf10; https://github.com/xibosignage/xibo-cms/releases/tag/4.3.1
CVE: CVE-2025-62507
Published: 2025-11-04
Description: Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this issue without patching the redis-server executable is to prevent users from executing XACKDEL operation. This can be done using ACL to restrict XACKDEL command.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-121, CWE-787
References: https://github.com/redis/redis/commit/5f83972188f6e5b1d6f1940218c650a9cbdf7741; https://github.com/redis/redis/releases/tag/8.2.3; https://github.com/redis/redis/security/advisories/GHSA-jhjx-x4cf-4vm8
CVE: CVE-2025-62520
Published: 2025-11-04
Description: Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.27.1 and below, due to insufficient access-level checks, any non-admin user with access to manage_config_columns_page.php can use the Copy From action to retrieve the columns configuration from a private project they have no access to. This issue is fixed in version 2.27.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://github.com/mantisbt/mantisbt/commit/4fe94f45fa2baea2aeb4b65781d2009e7b4a0bf3; https://github.com/mantisbt/mantisbt/security/advisories/GHSA-g582-8vwr-68h2; https://mantisbt.org/bugs/view.php?id=36502
CVE: CVE-2025-62715
Published: 2025-11-04
Description: ClipBucket v5 is an open source video sharing platform. Versions 5.5.2-#147 and below contain a stored Cross-Site Scripting (XSS) vulnerability in ClipBucket’s Collection tags feature. An authenticated normal user can create a tag containing HTML or JavaScript, which is later rendered unescaped in collection detail and tag-list pages. As a result, arbitrary JavaScript executes in the browsers of all users who view the affected pages. This issue is fixed in version 5.5.2-#152.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/MacWarrior/clipbucket-v5/commit/8e3cf79ce2721fbebde68a05a9a1a6319f086bcc; https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-h5f4-wj75-39x3
CVE: CVE-2025-62719
Published: 2025-11-04
Description: LinkAce is a self-hosted archive to collect website links. In versions 2.3.0 and below, the htmlKeywordsFromUrl function in the FetchController class accepts user-provided URLs and makes HTTP requests to them without validating that the destination is not an internal or private network resource. This Server-Side Request Forgery (SSRF) vulnerability allows authenticated attackers to use the application server to perform port scanning and service discovery on internal networks. Practical impact is very limited because the function only extracts content from HTML meta keywords tags, which prevents meaningful data exfiltration from databases, APIs, or cloud metadata endpoints. This issue is fixed in version 2.4.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: http://github.com/Kovah/LinkAce/releases/tag/v2.4.0; https://github.com/Kovah/LinkAce/commit/4e0b822163ccefc2640c283ae969a39e673a0619; https://github.com/Kovah/LinkAce/security/advisories/GHSA-473x-rmm6-mc8c
CVE: CVE-2025-62720
Published: 2025-11-04
Description: LinkAce is a self-hosted archive to collect website links. Versions 2.3.1 and below allow any authenticated user to export the entire database of links from all users in the system, including private links that should only be accessible to their owners. The HTML and CSV export functions in the ExportController class retrieve all links without applying any ownership or visibility filtering, effectively bypassing all access controls implemented elsewhere in the application. This issue is fixed in version 2.4.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://github.com/Kovah/LinkAce/commit/0ba49dba5176db390999de1f90b9d743a4aedc24; https://github.com/Kovah/LinkAce/releases/tag/v2.4.0; https://github.com/Kovah/LinkAce/security/advisories/GHSA-cqxv-6v28-2f2h
CVE: CVE-2025-62721
Published: 2025-11-04
Description: LinkAce is a self-hosted archive to collect website links. In versions 2.3.1 and below, authenticated RSS feed endpoints in the FeedController class fail to implement proper authorization checks, allowing any authenticated user to access all links, lists, and tags from all users in the system, regardless of their ownership or visibility settings. This issue is fixed in version 2.4.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://github.com/Kovah/LinkAce/commit/1fef32694cee2bd80892fb478416be9364c3fddd; https://github.com/Kovah/LinkAce/releases/tag/v2.4.0; https://github.com/Kovah/LinkAce/security/advisories/GHSA-47g2-qw6q-cr96
CVE: CVE-2025-59595
Published: 2025-11-04
Description: CVE-2025-59595 is an internally discovered denial of service 
vulnerability in versions of Secure Access prior to 14.12. An attacker 
can send a specially crafted packet to a server in a non-default 
configuration and cause the server to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-59595
CVE: CVE-2025-59596
Published: 2025-11-04
Description: CVE-2025-59596 is a denial-of-service vulnerability in Secure Access 
Windows client versions 12.0 to 14.10 that is addressed in version 
14.12. If a local networking policy is active, attackers on an adjacent 
network may be able to send a crafted packet and cause the client system
 to crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-59596
CVE: CVE-2025-62722
Published: 2025-11-04
Description: LinkAce is a self-hosted archive to collect website links. In versions 2.3.1 and below, the social media sharing functionality contains a Stored Cross-Site Scripting (XSS) vulnerability that allows any authenticated user to inject arbitrary JavaScript by creating a link with malicious HTML in the title field. When a user views the link details page and the shareable links are rendered, the malicious JavaScript executes in their browser. This vulnerability affects multiple sharing services and can be exploited to steal session cookies, perform actions on behalf of users, or deliver malware. This issue is fixed in version 2.4.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Kovah/LinkAce/commit/95d29b71ad9d4750cff8bbe7488802f6a4afa6aa; https://github.com/Kovah/LinkAce/releases/tag/v2.4.0; https://github.com/Kovah/LinkAce/security/advisories/GHSA-4mxh-7c7f-q79j
CVE: CVE-2025-64106
Published: 2025-11-04
Description: Cursor is a code editor built for programming with AI. In versions 1.7.28 and below, an input validation flaw in Cursor's MCP server installation enables specially crafted deep-links to bypass the standard security warnings and conceal executed commands from users if they choose to accept the server. If an attacker is able to convince a victim to navigate to a malicious deeplink, the victim will not see the correct speedbump modal, and if they choose to accept, will execute commands specified by the attackers deeplink.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/cursor/cursor/security/advisories/GHSA-4575-fh42-7848
CVE: CVE-2025-64107
Published: 2025-11-04
Description: Cursor is a code editor built for programming with AI. In versions 1.7.52 and below, manipulating internal settings may lead to RCE. Cursor detects path manipulation via forward slashes (./.cursor/./././././mcp.json etc.), and requires human approval to complete the operation. However, the same kind of manipulation using backslashes was not correctly detected, allowing an attacker who had already achieved prompt injection or some other level of control to overwrite sensitive editor files without approval on Windows machines. This issue is fixed in version 2.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/cursor/cursor/security/advisories/GHSA-2jr2-8wf5-v6pf
CVE: CVE-2025-64108
Published: 2025-11-04
Description: Cursor is a code editor built for programming with AI. In versions 1.7.44 and below, various NTFS path quirks allow a prompt injection attacker to circumvent sensitive file protections and overwrite files which Cursor requires human approval to overwrite. Modification of some of the protected files can lead to RCE. Must be chained with a prompt injection or malicious model attach. Only affects systems supporting NTFS. This issue is fixed in version 2.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-94
References: https://github.com/cursor/cursor/security/advisories/GHSA-6r98-6qcw-rxrw
CVE: CVE-2025-64109
Published: 2025-11-05
Description: Cursor is a code editor built for programming with AI. In versions and below, a vulnerability in the Cursor CLI Beta allowed an attacker to achieve remote code execution through the MCP (Model Context Protocol) server mechanism by uploading a malicious MCP configuration in .cursor/mcp.json file in a GitHub repository. Once a victim clones the project and opens it using Cursor CLI, the command to run the malicious MCP server is immediately executed without any warning, leading to potential code execution as soon as the command runs. This issue is fixed in version 2025.09.17-25b418f.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/cursor/cursor/security/advisories/GHSA-4hwr-97q3-37w2
CVE: CVE-2025-64110
Published: 2025-11-05
Description: Cursor is a code editor built for programming with AI. In versions 1.7.23 and below, a logic bug allows a malicious agent to read sensitive files that should be protected via cursorignore. An attacker who has already achieved prompt injection, or a malicious model, could create a new cursorignore file which can invalidate the configuration of pre-existing ones. This could allow a malicious agent to read protected files. This issue is fixed in version 2.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://github.com/cursor/cursor/security/advisories/GHSA-vhc2-fjv4-wqch
CVE: CVE-2025-12735
Published: 2025-11-05
Description: The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted context object or use MEMBER of the context object into the evaluate() function and trigger arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/advisories/GHSA-jc85-fpwf-qm7x; https://github.com/jorenbroekema/expr-eval; https://github.com/silentmatt/expr-eval
CVE: CVE-2025-12582
Published: 2025-11-05
Description: The Features plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'features_revert_option AJAX endpoint in all versions up to, and including, 0.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to revert options.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://wordpress.org/plugins/features/; https://www.wordfence.com/threat-intel/vulnerabilities/id/4a6efab8-04a0-459f-a791-9360c83e5dbe?source=cve