deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-32492
Published: 2025-04-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eliot Akira Admin Menu Post List admin-menu-post-list allows Stored XSS.This issue affects Admin Menu Post List: from n/a through <= 2.0.7.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/admin-menu-post-list/vulnerability/wordpress-admin-menu-post-list-2-0-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32493
Published: 2025-04-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VibeThemes BP Social Connect bp-social-connect allows Stored XSS.This issue affects BP Social Connect: from n/a through <= 1.6.2.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/bp-social-connect/vulnerability/wordpress-bp-social-connect-1-6-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32494
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in bozdoz reCAPTCHA Jetpack recaptcha-jetpack allows Cross Site Request Forgery.This issue affects reCAPTCHA Jetpack: from n/a through <= 0.2.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/recaptcha-jetpack/vulnerability/wordpress-recaptcha-jetpack-0-2-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2025-32495
Published: 2025-04-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joe Waymark waymark allows Stored XSS.This issue affects Waymark: from n/a through <= 1.5.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/waymark/vulnerability/wordpress-waymark-1-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32496
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Uncodethemes Ultra Demo Importer ut-demo-importer allows Upload a Web Shell to a Web Server.This issue affects Ultra Demo Importer: from n/a through <= 1.0.5.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/ut-demo-importer/vulnerability/wordpress-ultra-demo-importer-plugin-1-0-5-csrf-to-rce-vulnerability?_s_id=cve
CVE: CVE-2025-32497
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in squiter Spoiler Block spoiler-block allows Stored XSS.This issue affects Spoiler Block: from n/a through <= 1.7.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/spoiler-block/vulnerability/wordpress-spoiler-block-plugin-1-7-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32498
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in oleglark VKontakte Cross-Post vkontakte-cross-post allows Stored XSS.This issue affects VKontakte Cross-Post: from n/a through <= 0.3.2.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/vkontakte-cross-post/vulnerability/wordpress-vkontakte-cross-post-plugin-0-3-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32499
Published: 2025-04-09
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpWax Logo Showcase Ultimate logo-showcase-ultimate allows PHP Local File Inclusion.This issue affects Logo Showcase Ultimate: from n/a through <= 1.4.4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-98
References: https://patchstack.com/database/Wordpress/Plugin/logo-showcase-ultimate/vulnerability/wordpress-logo-showcase-ultimate-plugin-1-4-4-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2025-32500
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Sudavar Codescar Radio Widget codescar-radio-widget allows Stored XSS.This issue affects Codescar Radio Widget: from n/a through <= 0.4.2.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/codescar-radio-widget/vulnerability/wordpress-codescar-radio-widget-plugin-0-4-2-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32501
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in dimafreund Rentsyst rentsyst allows Stored XSS.This issue affects Rentsyst: from n/a through <= 2.0.92.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/rentsyst/vulnerability/wordpress-rentsyst-plugin-2-0-72-cross-site-request-forgery-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32502
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in lemmentwickler ePaper Lister for Yumpu magazine-lister-for-yumpu allows Stored XSS.This issue affects ePaper Lister for Yumpu: from n/a through <= 1.4.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/magazine-lister-for-yumpu/vulnerability/wordpress-epaper-lister-for-yumpu-plugin-1-4-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32503
Published: 2025-04-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jose Conti Link Shield link-shield allows Stored XSS.This issue affects Link Shield: from n/a through <= 0.5.4.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/link-shield/vulnerability/wordpress-link-shield-plugin-0-5-4-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32505
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in SCAND MultiMailer scand-multi-mailer allows Stored XSS.This issue affects MultiMailer: from n/a through <= 1.0.3.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/scand-multi-mailer/vulnerability/wordpress-multimailer-plugin-1-0-3-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32518
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in hossainawlad ALD Login Page ald-login-page allows Stored XSS.This issue affects ALD Login Page: from n/a through <= 1.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/ald-login-page/vulnerability/wordpress-ald-login-page-plugin-1-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32543
Published: 2025-04-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hivedigital Canonical Attachments canonical-attachments allows Reflected XSS.This issue affects Canonical Attachments: from n/a through <= 1.8.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/canonical-attachments/vulnerability/wordpress-canonical-attachments-plugin-1-7-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32547
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in gtlwpdev All push notification for WP all-push-notification allows Blind SQL Injection.This issue affects All push notification for WP: from n/a through <= 1.5.3.
CVSS Score: 8.2 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/all-push-notification/vulnerability/wordpress-all-push-notification-for-wp-plugin-1-5-3-csrf-to-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2025-32550
Published: 2025-04-09
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickandPledge Click & Pledge Connect Plugin allows SQL Injection. This issue affects Click & Pledge Connect Plugin: from 2.24080000 through WP6.6.1.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/wordpress/plugin/click-pledge-connect/vulnerability/wordpress-click-pledge-connect-plugin-plugin-2-24080000-wp6-6-1-sql-injection-vulnerability?_s_id=cve
CVE: CVE-2025-32555
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Edamam SEO, Nutrition and Print for Recipes by Edamam seo-nutrition-and-print-for-recipes-by-edamam allows Stored XSS.This issue affects SEO, Nutrition and Print for Recipes by Edamam: from n/a through <= 3.3.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/seo-nutrition-and-print-for-recipes-by-edamam/vulnerability/wordpress-seo-nutrition-and-print-for-recipes-by-edamam-plugin-3-3-csrf-to-cross-site-scripting-vulnerability?_s_id=cve
CVE: CVE-2025-32556
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Sandor Kovacs Simple Post Meta Manager simple-post-meta-manager allows Reflected XSS.This issue affects Simple Post Meta Manager: from n/a through <= 1.0.9.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/simple-post-meta-manager/vulnerability/wordpress-simple-post-meta-manager-plugin-1-0-9-csrf-to-reflected-cross-site-scripting-vulnerability?_s_id=cve
CVE: CVE-2025-32559
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in REVE Chat REVE Chat revechat allows Stored XSS.This issue affects REVE Chat: from n/a through <= 6.4.4.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/revechat/vulnerability/wordpress-reve-chat-plugin-6-2-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32563
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in dangrossman WP Calais Auto Tagger calais-auto-tagger allows Cross Site Request Forgery.This issue affects WP Calais Auto Tagger: from n/a through <= 2.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/calais-auto-tagger/vulnerability/wordpress-wp-calais-auto-tagger-plugin-2-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32570
Published: 2025-04-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ChillPay ChillPay WooCommerce chillpay-payment-gateway allows Stored XSS.This issue affects ChillPay WooCommerce: from n/a through <= 2.5.3.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/chillpay-payment-gateway/vulnerability/wordpress-chillpay-woocommerce-plugin-2-5-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32575
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in axew3 WP w3all phpBB wp-w3all-phpbb-integration allows Reflected XSS.This issue affects WP w3all phpBB: from n/a through <= 2.9.9.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/wp-w3all-phpbb-integration/vulnerability/wordpress-wp-w3all-phpbb-plugin-2-9-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32576
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Agence web Eoxia - Montpellier WP shop wpshop allows Upload a Web Shell to a Web Server.This issue affects WP shop: from n/a through <= 2.6.1.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/wpshop/vulnerability/wordpress-wp-shop-plugin-2-6-0-csrf-to-arbitrary-file-upload-vulnerability?_s_id=cve
CVE: CVE-2025-32580
Published: 2025-04-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in debounce DeBounce Email Validator debounce-io-email-validator allows Stored XSS.This issue affects DeBounce Email Validator: from n/a through <= 5.7.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/debounce-io-email-validator/vulnerability/wordpress-debounce-email-validator-plugin-5-7-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32581
Published: 2025-04-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ankit Singla WordPress Spam Blocker cf7-manual-spam-blocker allows Stored XSS.This issue affects WordPress Spam Blocker: from n/a through <= 2.0.5.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/cf7-manual-spam-blocker/vulnerability/wordpress-wordpress-spam-blocker-plugin-2-0-4-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32584
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Chat2 Chat2 chat2 allows Cross Site Request Forgery.This issue affects Chat2: from n/a through <= 4.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/chat2/vulnerability/wordpress-chat2-plugin-3-6-3-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32591
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Kevon Adonis WP Abstracts wp-abstracts-manuscripts-manager allows Cross Site Request Forgery.This issue affects WP Abstracts: from n/a through <= 2.7.5.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/wp-abstracts-manuscripts-manager/vulnerability/wordpress-wp-abstracts-plugin-2-7-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32597
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in George Sexton WordPress Events Calendar Plugin – connectDaily connect-daily-web-calendar allows Cross-Site Scripting (XSS).This issue affects WordPress Events Calendar Plugin – connectDaily: from n/a through <= 1.5.4.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/connect-daily-web-calendar/vulnerability/wordpress-wordpress-events-calendar-plugin-connectdaily-plugin-1-4-8-csrf-to-cross-site-scripting-vulnerability?_s_id=cve
CVE: CVE-2025-32610
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in FolioVision Foliopress WYSIWYG foliopress-wysiwyg allows Cross Site Request Forgery.This issue affects Foliopress WYSIWYG: from n/a through <= 2.6.18.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/foliopress-wysiwyg/vulnerability/wordpress-foliopress-wysiwyg-plugin-2-6-18-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32612
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in rafasashi User Session Synchronizer user-session-synchronizer allows Stored XSS.This issue affects User Session Synchronizer: from n/a through <= 1.4.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/user-session-synchronizer/vulnerability/wordpress-user-session-synchronizer-plugin-1-4-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32616
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in nimbata Nimbata Call Tracking nimbata-call-tracking allows Stored XSS.This issue affects Nimbata Call Tracking: from n/a through <= 1.7.4.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/nimbata-call-tracking/vulnerability/wordpress-nimbata-call-tracking-plugin-1-7-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32617
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Ydesignservices Multiple Location Google Map multiple-location-google-map allows Stored XSS.This issue affects Multiple Location Google Map: from n/a through <= 1.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/multiple-location-google-map/vulnerability/wordpress-multiple-location-google-map-plugin-1-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32619
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in KeyCAPTCHA KeyCAPTCHA keycaptcha allows Stored XSS.This issue affects KeyCAPTCHA: from n/a through <= 2.5.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/keycaptcha/vulnerability/wordpress-keycaptcha-plugin-2-5-1-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32621
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Vsourz Digital WP Map Route Planner wp-map-route-planner allows Cross Site Request Forgery.This issue affects WP Map Route Planner: from n/a through <= 1.0.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/wp-map-route-planner/vulnerability/wordpress-wp-map-route-planner-plugin-1-0-0-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32623
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in plainware PlainInventory z-inventory-manager allows Stored XSS.This issue affects PlainInventory: from n/a through <= 3.1.9.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/z-inventory-manager/vulnerability/wordpress-plaininventory-plugin-3-1-9-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32624
Published: 2025-04-09
Description: Missing Authorization vulnerability in czater Czater.pl – live chat i telefon czater allows Cross Site Request Forgery.This issue affects Czater.pl – live chat i telefon: from n/a through <= 1.0.5.
CVSS Score: 7.1 (HIGH)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/czater/vulnerability/wordpress-czater-pl-live-chat-i-telefon-plugin-1-0-5-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32640
Published: 2025-04-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Ally pojo-accessibility allows Stored XSS.This issue affects Ally: from n/a through <= 3.1.0.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/pojo-accessibility/vulnerability/wordpress-one-click-accessibility-plugin-3-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32641
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in anantaddons Anant Addons for Elementor anant-addons-for-elementor allows Cross Site Request Forgery.This issue affects Anant Addons for Elementor: from n/a through <= 1.1.8.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/anant-addons-for-elementor/vulnerability/wordpress-anant-addons-for-elementor-plugin-1-1-5-csrf-to-arbitrary-plugin-installation-vulnerability?_s_id=cve
CVE: CVE-2025-32642
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in appsbd Vite Coupon vite-coupon allows Remote Code Inclusion.This issue affects Vite Coupon: from n/a through <= 1.0.9.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/vite-coupon/vulnerability/wordpress-vite-coupon-plugin-1-0-7-csrf-to-remote-code-execution-rce-vulnerability?_s_id=cve
CVE: CVE-2025-32644
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in IP2Location IP2Location World Clock ip2location-world-clock allows Stored XSS.This issue affects IP2Location World Clock: from n/a through <= 1.1.9.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/ip2location-world-clock/vulnerability/wordpress-ip2location-world-clock-plugin-1-1-9-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32645
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Hiren Patel Custom Posts Order custom-posts-order allows Stored XSS.This issue affects Custom Posts Order: from n/a through <= 4.4.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/custom-posts-order/vulnerability/wordpress-custom-posts-order-plugin-4-4-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32659
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in fraudlabspro FraudLabs Pro for WooCommerce fraudlabs-pro-for-woocommerce allows Stored XSS.This issue affects FraudLabs Pro for WooCommerce: from n/a through <= 2.22.8.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/fraudlabs-pro-for-woocommerce/vulnerability/wordpress-fraudlabs-pro-for-woocommerce-plugin-2-22-7-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32661
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in WP Map Plugins Interactive US Map interactive-us-map allows Stored XSS.This issue affects Interactive US Map: from n/a through <= 2.7.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/interactive-us-map/vulnerability/wordpress-interactive-us-map-plugin-2-7-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32664
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in ashokbasnet Nepali Date Utilities nepali-date-utilities allows Stored XSS.This issue affects Nepali Date Utilities: from n/a through <= 1.0.15.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/nepali-date-utilities/vulnerability/wordpress-nepali-date-utilities-plugin-1-0-13-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32667
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in fromdoppler Doppler Forms doppler-form allows Stored XSS.This issue affects Doppler Forms: from n/a through <= 2.5.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/doppler-form/vulnerability/wordpress-doppler-forms-plugin-2-4-5-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32669
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in MERGADO Mergado Pack mergado-marketing-pack allows Stored XSS.This issue affects Mergado Pack: from n/a through <= 4.2.1.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/mergado-marketing-pack/vulnerability/wordpress-mergado-pack-plugin-4-0-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32673
Published: 2025-04-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in epeken Epeken All Kurir epeken-all-kurir allows Stored XSS.This issue affects Epeken All Kurir: from n/a through <= 2.0.6.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/epeken-all-kurir/vulnerability/wordpress-epeken-all-kurir-plugin-1-4-6-2-csrf-to-stored-xss-vulnerability?_s_id=cve
CVE: CVE-2025-32675
Published: 2025-04-09
Description: Server-Side Request Forgery (SSRF) vulnerability in QuantumCloud SEO Help seo-help allows Server Side Request Forgery.This issue affects SEO Help: from n/a through <= 6.7.9.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-918
References: https://patchstack.com/database/Wordpress/Plugin/seo-help/vulnerability/wordpress-seo-help-plugin-6-6-0-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE: CVE-2025-32676
Published: 2025-04-09
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Picture-Planet GmbH Verowa Connect verowa-connect allows Blind SQL Injection.This issue affects Verowa Connect: from n/a through <= 3.0.5.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89
References: https://patchstack.com/database/Wordpress/Plugin/verowa-connect/vulnerability/wordpress-verowa-connect-plugin-3-0-5-sql-injection-vulnerability?_s_id=cve