deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-46540
Published: 2025-04-24
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Mok GNA Search Shortcode gna-search-shortcode allows Stored XSS.This issue affects GNA Search Shortcode: from n/a through <= 0.9.5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/gna-search-shortcode/vulnerability/wordpress-gna-search-shortcode-0-9-5-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-46541
Published: 2025-04-24
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in elrata_ WP-reCAPTCHA-bp wp-recaptcha-bp allows Stored XSS.This issue affects WP-reCAPTCHA-bp: from n/a through <= 4.1.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/wp-recaptcha-bp/vulnerability/wordpress-wp-recaptcha-bp-4-1-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-46542
Published: 2025-04-24
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeXpert Xpert Tab xpert-tab allows Stored XSS.This issue affects Xpert Tab: from n/a through <= 1.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/xpert-tab/vulnerability/wordpress-xpert-tab-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2023-37534
Published: 2025-04-24
Description: Insufficient URI protocol whitelist in HCL Leap
allows script injection through query parameters.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE: CVE-2023-45720
Published: 2025-04-24
Description: Insufficient default configuration in HCL Leap
allows anonymous access to directory information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-359
References: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE: CVE-2024-30113
Published: 2025-04-24
Description: Insufficient sanitization policy in HCL Leap
allows client-side script injection in the deployed application through the
HTML widget.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE: CVE-2024-30114
Published: 2025-04-24
Description: Insufficient sanitization in HCL Leap allows
client-side script injection in the authoring environment.
CVSS Score: 3.7 (LOW)
CWE: CWE-79
References: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE: CVE-2024-30147
Published: 2025-04-24
Description: Multiple vectors in HCL Leap allow client-side
script injection in the authoring environment and deployed applications.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE: CVE-2025-31324
Published: 2025-04-24
Description: SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-434
References: https://me.sap.com/notes/3594142; https://url.sap/sapsecuritypatchday; https://onapsis.com/blog/active-exploitation-of-sap-vulnerability-cve-2025-31324/
CVE: CVE-2025-43858
Published: 2025-04-24
Description: YoutubeDLSharp is a wrapper for the command-line video downloaders youtube-dl and yt-dlp. In versions starting from 1.0.0-beta4 and prior to 1.1.2, an unsafe conversion of arguments allows the injection of a malicious commands when starting `yt-dlp` from a commands prompt running on Windows OS with the `UseWindowsEncodingWorkaround` value defined to true (default behavior). If a user is using built-in methods from the YoutubeDL.cs file, the value is true by default and a user cannot disable it from these methods. This issue has been patched in version 1.1.2.
CVSS Score: 9.2 (CRITICAL)
CWE: CWE-77, CWE-78
References: https://github.com/Bluegrams/YoutubeDLSharp/commit/b6051372bd5af30f95f73de47d9bc71c3a07de0f; https://github.com/Bluegrams/YoutubeDLSharp/commit/fdf3256da18d0e2da4a2f33ad4a1b72ff8273a50; https://github.com/Bluegrams/YoutubeDLSharp/security/advisories/GHSA-2jh5-g5ch-43q5
CVE: CVE-2025-43859
Published: 2025-04-24
Description: h11 is a Python implementation of HTTP/1.1. Prior to version 0.16.0, a leniency in h11's parsing of line terminators in chunked-coding message bodies can lead to request smuggling vulnerabilities under certain conditions. This issue has been patched in version 0.16.0. Since exploitation requires the combination of buggy h11 with a buggy (reverse) proxy, fixing either component is sufficient to mitigate this issue.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-444
References: https://github.com/python-hyper/h11/commit/114803a29ce50116dc47951c690ad4892b1a36ed; https://github.com/python-hyper/h11/security/advisories/GHSA-vqfr-h8mv-ghfj
CVE: CVE-2025-26382
Published: 2025-04-24
Description: Under certain circumstances the iSTAR Configuration Utility (ICU) tool could have a buffer overflow issue
CWE: CWE-121
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-05; https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories
CVE: CVE-2022-44759
Published: 2025-04-24
Description: Improper sanitization of SVG files in HCL Leap
allows client-side script injection in deployed applications.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE: CVE-2022-44760
Published: 2025-04-24
Description: Unsafe default file type filter policy in HCL
Leap allows execution of unsafe JavaScript in deployed applications.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-434
References: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE: CVE-2023-37516
Published: 2025-04-24
Description: Missing "no cache" headers in HCL Leap permits user directory information to be cached.
CVSS Score: 3.2 (LOW)
CWE: CWE-524
References: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE: CVE-2024-30127
Published: 2025-04-24
Description: Missing "no cache" headers in HCL Leap permits sensitive data to be cached.
CVSS Score: 3.2 (LOW)
CWE: CWE-524
References: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0119900
CVE: CVE-2025-25777
Published: 2025-04-24
Description: Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks.
CVSS Score: 8.0 (HIGH)
CWE: CWE-639
References: https://codeastro.com/bus-ticket-booking-system-in-php-codeigniter-with-source-code/; https://github.com/arunmodi/Vulnerability-Research/tree/main/CVE-2025-25777
CVE: CVE-2025-29529
Published: 2025-04-24
Description: ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/Yoshik0xF6/CVE-2025-29529; https://github.com/chamilo/chamilo-lms/commit/beb07770d674fcc9db6df0e59aab107678c28682
CVE: CVE-2025-43861
Published: 2025-04-24
Description: ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 2f177dc, ManageWiki is vulnerable to reflected or stored XSS in the review dialog. A logged-in attacker must change a form field to include a malicious payload. If that same user then opens the "Review Changes" dialog, the payload will be rendered and executed in the context of their own session. This issue has been patched in commit 2f177dc.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/miraheze/ManageWiki/commit/2f177dc83b28b727613215b835d4036cb179e4ab; https://github.com/miraheze/ManageWiki/security/advisories/GHSA-859x-46h8-vcrv
CVE: CVE-2025-1294
Published: 2025-04-24
Description: The eForm - WordPress Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.18.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://codecanyon.net/item/eform-wordpress-form-builder/3180835; https://eform.live/changelog/; https://www.wordfence.com/threat-intel/vulnerabilities/id/6c5db375-e865-47ba-a3dd-462c55d066fd?source=cve
CVE: CVE-2025-3749
Published: 2025-04-24
Description: The Breeze Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘cal_size’ parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/wt-display-breeze/trunk/includes/shortcodes.php#L114; https://plugins.trac.wordpress.org/changeset/3280146/; https://wordpress.org/plugins/wt-display-breeze/#developers
CVE: CVE-2025-46271
Published: 2025-04-24
Description: UNI-NMS-Lite is vulnerable to a command injection attack that could 
allow an unauthenticated attacker to read or manipulate device data.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06
CVE: CVE-2025-46272
Published: 2025-04-24
Description: WGS-80HPT-V2 and WGS-4215-8T2S are vulnerable to a command injection 
attack that could allow an unauthenticated attacker to execute OS 
commands on the host system.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06
CVE: CVE-2025-46273
Published: 2025-04-24
Description: UNI-NMS-Lite uses hard-coded credentials that could allow an 
unauthenticated attacker to gain administrative privileges to all 
UNI-NMS managed devices.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06
CVE: CVE-2025-46274
Published: 2025-04-24
Description: UNI-NMS-Lite uses hard-coded credentials that could allow an 
unauthenticated attacker to read, manipulate and create entries in the 
managed database.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06
CVE: CVE-2025-46275
Published: 2025-04-24
Description: WGS-80HPT-V2 and WGS-4215-8T2S are missing authentication that could 
allow an attacker to create an administrator account without knowing any
 existing credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06
CVE: CVE-2025-2185
Published: 2025-04-25
Description: ALBEDO Telecom Net.Time - PTP/NTP clock (Serial No. NBC0081P) software release 1.4.4 is vulnerable to an insufficient session expiration vulnerability, which
 could permit an attacker to transmit passwords over unencrypted 
connections, resulting in the product becoming vulnerable to 
interception.
CVSS Score: 8.0 (HIGH)
CWE: CWE-613
References: https://www.albedotelecom.com/contactus.php; https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-02
CVE: CVE-2025-3606
Published: 2025-04-25
Description: Vestel AC Charger 
version 

3.75.0 contains a vulnerability that 
could enable an attacker to access files containing sensitive 
information, such as credentials which could be used to further 
compromise the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-497
References: https://firebasestorage.googleapis.com/v0/b/vestel-shield.firebasestorage.app/o/PRODUCTION%2F1%2FVSA-1_R2.pdf?alt=media&token=8201f299-5014-4720-9200-f1b335736ac1; https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-03
CVE: CVE-2025-43864
Published: 2025-04-25
Description: React Router is a router for React. Starting in version 7.2.0 and prior to version 7.5.2, it is possible to force an application to switch to SPA mode by adding a header to the request. If the application uses SSR and is forced to switch to SPA, this causes an error that completely corrupts the page. If a cache system is in place, this allows the response containing the error to be cached, resulting in a cache poisoning that strongly impacts the availability of the application. This issue has been patched in version 7.5.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: https://github.com/remix-run/react-router/blob/e6c53a0130559b4a9bd47f9cf76ea5b08a69868a/packages/react-router/lib/server-runtime/server.ts#L407; https://github.com/remix-run/react-router/commit/c84302972a152d851cf5dd859ff332b354b70111; https://github.com/remix-run/react-router/security/advisories/GHSA-f46r-rw29-r322
CVE: CVE-2025-43865
Published: 2025-04-25
Description: React Router is a router for React. In versions on the 7.0 branch prior to version 7.5.2, it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values ​​of the data object passed to the HTML. This issue has been patched in version 7.5.2.
CVSS Score: 8.2 (HIGH)
CWE: CWE-345
References: https://github.com/remix-run/react-router/blob/e6c53a0130559b4a9bd47f9cf76ea5b08a69868a/packages/react-router/lib/server-runtime/routes.ts#L87; https://github.com/remix-run/react-router/commit/c84302972a152d851cf5dd859ff332b354b70111; https://github.com/remix-run/react-router/security/advisories/GHSA-cpj6-fhp6-mr6j
CVE: CVE-2025-46544
Published: 2025-04-25
Description: In Sherpa Orchestrator 141851, a low-privileged user can elevate their privileges by creating new users and roles.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-863
References: https://deiteriy.com; https://gist.github.com/ArtemBrylev/a258f920a[PII_REDACTED]c9a483fcf194a; https://sherparpa.com
CVE: CVE-2025-46545
Published: 2025-04-25
Description: In Sherpa Orchestrator 141851, the functionality for adding or updating licenses allows for stored XSS attacks by an administrator through the name parameter. The XSS payload can execute when the license expires.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://deiteriy.com; https://gist.github.com/ArtemBrylev/5a0c76285d5fa9daf4ec753034185de7; https://sherparpa.com
CVE: CVE-2025-46546
Published: 2025-04-25
Description: In Sherpa Orchestrator 141851, multiple time-based blind SQL injections can be performed by an authenticated user. This affects api/gui/asset/list, /api/gui/files/export/csv/, /api/gui/files/list, /api/gui/process/export/csv, /api/gui/process/export/xlsx, /api/gui/process/listAll, /api/gui/processVersion/export/csv/, /api/gui/processVersion/export/xlsx/, /api/gui/processVersion/list/, /api/gui/robot/list/, /api/gui/task/export/csv/, /api/gui/task/export/xlsx/, and /api/gui/task/list/.
CVSS Score: 3.5 (LOW)
CWE: CWE-89
References: https://deiteriy.com; https://gist.github.com/ArtemBrylev/59b4c0825a988f39a58b79e4e8d2f378; https://sherparpa.com
CVE: CVE-2025-46547
Published: 2025-04-25
Description: In Sherpa Orchestrator 141851, the web application lacks protection against CSRF attacks, with resultant effects of an attacker conducting XSS attacks, adding a new user or role, or exploiting a SQL injection issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://deiteriy.com; https://gist.github.com/ArtemBrylev/9af206c46d7505db03ad6fcd9fc46f7f; https://sherparpa.com
CVE: CVE-2025-46595
Published: 2025-04-25
Description: An XSS issue was discovered in the Flag module before 1.x-3.6.2 for Backdrop CMS. Flag is a module that allows flags to be added to nodes, comments, users, and any other type of entity. It doesn't verify flag links before performing the flag action, or verify that the response returned was provided by the flag module. This can allow crafted HTML to result in Cross Site Scripting. This is mitigated by the fact that an attacker must have a role with permission to create links on the website, for example: create or edit comments or content with a filtered text format.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://backdropcms.org/security/backdrop-sa-contrib-2025-011
CVE: CVE-2025-3752
Published: 2025-04-25
Description: The Able Player, accessible HTML5 media player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘preload’ parameter in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CVE-2025-46475 may be a duplicate of this.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/ableplayer/trunk/ableplayer.php#L375; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3281106%40ableplayer&new=3281106%40ableplayer; https://wordpress.org/plugins/ableplayer/#developers
CVE: CVE-2025-3775
Published: 2025-04-25
Description: The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.2 via the woolentor_template_proxy function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application, and can be used to query and modify information from internal services.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://plugins.trac.wordpress.org/browser/woolentor-addons/tags/3.1.2/includes/admin-panel/includes/classes/Admin.php#L71; https://www.wordfence.com/threat-intel/vulnerabilities/id/4dfc28ec-1411-43c3-833e-a6c85a3ed767?source=cve
CVE: CVE-2025-46599
Published: 2025-04-25
Description: CNCF K3s 1.32 before 1.32.4-rc1+k3s1 has a Kubernetes kubelet configuration change with the unintended consequence that, in some situations, ReadOnlyPort is set to 10255. For example, the default behavior of a K3s online installation might allow unauthenticated access to this port, exposing credentials.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-1188
References: https://cloud.google.com/kubernetes-engine/docs/how-to/disable-kubelet-readonly-port; https://github.com/f1veT/BUG/issues/2; https://github.com/k3s-io/k3s/commit/097b63e588e3c844cdf9b967bcd0a69f4fc0aa0a
CVE: CVE-2025-0671
Published: 2025-04-25
Description: The Icegram Express  WordPress plugin before 5.7.50 does not sanitise and escape some of its Template settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f4e04f01-31cb-4f5e-9739-12f803600e60/
CVE: CVE-2025-2580
Published: 2025-04-25
Description: The Contact Form by Bit Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.18.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3271396/; https://wordpress.org/plugins/bit-form/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/1f3b5d85-a8b0-43ac-b593-a61e20b9a4ca?source=cve
CVE: CVE-2025-3511
Published: 2025-04-25
Description: Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY, MELSEC iQ-R Series CC-Link IE TSN Master/Local Module, MELSEC iQ-R Series Ethernet Interface Module, CC-Link IE TSN Master/Local Station Communication LSI CP610, MELSEC iQ-F Series FX5 CC-Link IE TSN Master/Local Module, MELSEC iQ-F Series FX5 Ethernet Module, and MELSEC iQ-F Series FX5-ENET/IP Ethernet Module allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1284
References: https://jvn.jp/vu/JVNVU96620683/; https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-03; https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf
CVE: CVE-2025-3861
Published: 2025-04-25
Description: The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access and modification of data| due to a misconfigured capability check on the 'pda_lite_custom_permission_check' function in versions 2.8.6 to 2.8.8.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to access and change the protection status of media.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://plugins.trac.wordpress.org/browser/prevent-direct-access/tags/2.8.8.2/includes/pda_lite_api.php#L71; https://plugins.trac.wordpress.org/changeset/3279923/; https://www.wordfence.com/threat-intel/vulnerabilities/id/2ed83916-3cf7-4fc6-a16f-45b40cedc721?source=cve
CVE: CVE-2025-3923
Published: 2025-04-25
Description: The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'generate_unique_string' due to insufficient randomness of the generated file name. This makes it possible for unauthenticated attackers to extract sensitive data including files protected by the plugin if the attacker can determine the file name.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.svn.wordpress.org/prevent-direct-access/tags/2.8.8/includes/helper.php; https://plugins.trac.wordpress.org/browser/prevent-direct-access/trunk/includes/helper.php#L16; https://www.wordfence.com/threat-intel/vulnerabilities/id/f648a9ca-a72f-418e-bf1b-ad4ecc27d365?source=cve
CVE: CVE-2025-46613
Published: 2025-04-25
Description: OpenPLC 3 through 64f9c11 has server.cpp Memory Corruption because a thread may access handleConnections arguments after the parent stack frame becomes unavailable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: https://github.com/thiagoralves/OpenPLC_v3/issues/273
CVE: CVE-2025-2238
Published: 2025-04-25
Description: The Vikinger theme for WordPress is vulnerable to privilege in all versions up to, and including, 1.9.30. This is due to insufficient user_meta restrictions in the 'vikinger_user_meta_update_ajax' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to escalate their privileges to Administrator-level.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://themeforest.net/item/vikinger-buddypress-and-gamipress-social-community/28612259; https://www.wordfence.com/threat-intel/vulnerabilities/id/9e0cba5b-5833-4c02-ac17-830994b0f207?source=cve