deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-11890
Published: 2025-11-04
Description: The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a payments status through server-side validation though the /wc-api/bp-payeer-gateway-callback endpoint. This makes it possible for unauthenticated attackers to update unpaid order statuses to paid resulting in a loss of revenue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://wordpress.org/plugins/crypto-payment-gateway-with-payeer-for-woocommerce/; https://www.wordfence.com/threat-intel/vulnerabilities/id/43ca1393-637d-48e2-84f3-a06a4f0d83d1?source=cve
CVE: CVE-2025-12065
Published: 2025-11-04
Description: The WP Carticon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'carticon_js_script' parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/wp-carticon/; https://www.wordfence.com/threat-intel/vulnerabilities/id/c346b7d8-d1d4-473d-9388-e38631658c78?source=cve
CVE: CVE-2025-12156
Published: 2025-11-04
Description: The Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_post_data() function in versions 2.0.7 to 2.2.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create and publish arbitrary posts.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://wordpress.org/plugins/ai-auto-tool/; https://www.wordfence.com/threat-intel/vulnerabilities/id/7bcfb35d-6d86-4481-be97-58c2c410e0cd?source=cve
CVE: CVE-2025-12157
Published: 2025-11-04
Description: The Simple User Capabilities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_nopriv_reset_capability' AJAX endpoint in all versions up to, and including, 1.0. This makes it possible for unauthenticated attackers to reset any user's capabilities.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://plugins.svn.wordpress.org/simple-user-capabilities/tags/1.0/user_access.php; https://wordpress.org/plugins/simple-user-capabilities/; https://www.wordfence.com/threat-intel/vulnerabilities/id/3a1d0432-aff0-477e-aa6e-4de3e4d789cb?source=cve
CVE: CVE-2025-12158
Published: 2025-11-04
Description: The Simple User Capabilities plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the suc_submit_capabilities() function in all versions up to, and including, 1.0. This makes it possible for unauthenticated attackers to elevate the role of any user account to administrator.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://plugins.svn.wordpress.org/simple-user-capabilities/tags/1.0/user_access.php; https://wordpress.org/plugins/simple-user-capabilities/; https://www.wordfence.com/threat-intel/vulnerabilities/id/dd75b8ec-1961-4a7a-92e6-1517e638974b?source=cve
CVE: CVE-2025-12188
Published: 2025-11-04
Description: The Posts Navigation Links for Sections and Headings – Free by WP Masters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the 'wpm_navigation_links_settings' page. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wordpress.org/plugins/posts-navigation-links-for-sections-and-headings-free-by-wp-masters/; https://www.wordfence.com/threat-intel/vulnerabilities/id/05f73a26-f637-4a1a-9f8c-98be8a146f00?source=cve
CVE: CVE-2025-12350
Published: 2025-11-04
Description: The DominoKit plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wp_ajax_nopriv_dominokit_option_admin_action AJAX endpoint in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to update plugin settings.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://wordpress.org/plugins/dominokit/; https://www.wordfence.com/threat-intel/vulnerabilities/id/1c8de019-4ec1-49fd-9b0b-c2b1b6908ba8?source=cve
CVE: CVE-2025-12369
Published: 2025-11-04
Description: The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `geojsonmarker` shortcode in all versions up to, and including, 4.7. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/extensions-leaflet-map/tags/4.7/php/geojsonmarker.php#L90; https://plugins.trac.wordpress.org/changeset/3387532/; https://wordpress.org/plugins/extensions-leaflet-map
CVE: CVE-2025-12371
Published: 2025-11-04
Description: The Nari Accountant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via account settings in all versions up to, and including, 1.0.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/nari-accountant/; https://www.wordfence.com/threat-intel/vulnerabilities/id/c0a5e6b9-4da1-4d95-9fb1-aabb0d21b695?source=cve
CVE: CVE-2025-12389
Published: 2025-11-04
Description: The Import Export For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_setting() function in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's record setting.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://wordpress.org/plugins/import-export-for-woocommerce/; https://www.wordfence.com/threat-intel/vulnerabilities/id/a5a93e3f-54c6-4970-96fd-fab0e81f7034?source=cve
CVE: CVE-2025-12393
Published: 2025-11-04
Description: The Free Quotation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/free-quotation/; https://www.wordfence.com/threat-intel/vulnerabilities/id/1c441ceb-0363-4117-afd6-afa253343cbe?source=cve
CVE: CVE-2025-12396
Published: 2025-11-04
Description: The clubmember plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://wordpress.com/plugins/clubmember; https://www.wordfence.com/threat-intel/vulnerabilities/id/fed6bb3e-40f1-4d7a-b643-485f908cc816?source=cve
CVE: CVE-2025-12400
Published: 2025-11-04
Description: The LMB^Box Smileys plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2. This is due to missing or incorrect nonce validation on the manage_page() function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/lmbbox-smileys/tags/3.2/lmbbox-smileys.php#L318; https://plugins.trac.wordpress.org/browser/lmbbox-smileys/tags/3.2/lmbbox-smileys.php#L426; https://plugins.trac.wordpress.org/browser/lmbbox-smileys/tags/3.2/lmbbox-smileys.php#L890
CVE: CVE-2025-12402
Published: 2025-11-04
Description: The LinkedIn Resume plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.00. This is due to missing or incorrect nonce validation on the linkedinresume_printAdminPage() function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/linkedin-resume/tags/2.00/linkedinresume.php#L243; https://plugins.trac.wordpress.org/browser/linkedin-resume/tags/2.00/linkedinresume.php#L245; https://plugins.trac.wordpress.org/browser/linkedin-resume/tags/2.00/linkedinresume.php#L259
CVE: CVE-2025-12403
Published: 2025-11-04
Description: The Associados Amazon Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.8. This is due to missing or incorrect nonce validation on the brzon_admin_panel() function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/brzon/tags/0.8/brzon.php#L568; https://plugins.trac.wordpress.org/browser/brzon/tags/0.8/brzon.php#L569; https://plugins.trac.wordpress.org/browser/brzon/tags/0.8/brzon.php#L589
CVE: CVE-2025-12410
Published: 2025-11-04
Description: The SH Contextual Help plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.1. This is due to missing or incorrect nonce validation in the sh_contextual_help_dashboard_widget() function. This makes it possible for unauthenticated attackers to update the plugin's settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/sh-contextual-help/tags/3.2.1/functions.php#L400; https://plugins.trac.wordpress.org/browser/sh-contextual-help/tags/3.2.1/functions.php#L402; https://plugins.trac.wordpress.org/browser/sh-contextual-help/tags/3.2.1/functions.php#L417
CVE: CVE-2025-12412
Published: 2025-11-04
Description: The Top Bar Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12. This is due to missing or incorrect nonce validation on th tbn_ajax_add() function. This makes it possible for unauthenticated attackers to update the plugin's settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/top-bar-notification/tags/1.12/Notification.php#L102; https://plugins.trac.wordpress.org/browser/top-bar-notification/tags/1.12/Notification.php#L75; https://www.wordfence.com/threat-intel/vulnerabilities/id/0856f3bf-da17-44bb-aa30-26f9fb6e22b1?source=cve
CVE: CVE-2025-12413
Published: 2025-11-04
Description: The Social Media WPCF7 Stop Words plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.3. This is due to missing or incorrect nonce validation on the smWpCfSwOptions() function. This makes it possible for unauthenticated attackers to update the plugin's settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/wpcf7-stop-words/tags/1.1.3/social-media-wpcf7-stop-words.php#L45; https://www.wordfence.com/threat-intel/vulnerabilities/id/27857a17-8cf0-40b3-894f-8dd7cf5108dd?source=cve
CVE: CVE-2025-12415
Published: 2025-11-04
Description: The MapMap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the admin_shortcode_submit, admin_configuration_submit, and admin_shortcode_delete functions. This makes it possible for unauthenticated attackers to update the plugin's settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/mapmap/tags/1.1/mapmap.php#L397; https://plugins.trac.wordpress.org/browser/mapmap/tags/1.1/mapmap.php#L418; https://plugins.trac.wordpress.org/browser/mapmap/tags/1.1/mapmap.php#L447
CVE: CVE-2025-12416
Published: 2025-11-04
Description: The Pagerank Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Site Request Forgery in all versions up to, and including, 1.1.5. This is due to missing nonce validation on the pr_save_settings() function and insufficient input sanitization. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. The injected scripts will execute whenever a user accesses the plugin's settings page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/pagerank-tools/tags/1.1.5/functions.inc.php#L176; https://plugins.trac.wordpress.org/browser/pagerank-tools/tags/1.1.5/functions.inc.php#L192; https://www.wordfence.com/threat-intel/vulnerabilities/id/177900d6-c52e-4ac4-a74d-412e453f9d05?source=cve
CVE: CVE-2025-12452
Published: 2025-11-04
Description: The Visit Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the widgets.php page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://wordpress.org/plugins/visit-counter/; https://www.wordfence.com/threat-intel/vulnerabilities/id/d9e0f3a5-35fb-4c7e-892f-8a41498e1d3c?source=cve
CVE: CVE-2025-12456
Published: 2025-11-04
Description: The Centangle-Team plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to modify plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additionally, due to insufficient input sanitization and output escaping on cai_name_color parameter, this issue allows to inject arbitrary web scripts in pages, that will execute whenever a user accesses an injected page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/centangle-team/trunk/Centangle-Team-Showcase.php#L132; https://plugins.trac.wordpress.org/browser/centangle-team/trunk/inc_/cai_setting.php#L172; https://plugins.trac.wordpress.org/browser/centangle-team/trunk/inc_/cai_setting.php#L196
CVE: CVE-2025-12683
Published: 2025-11-04
Description: The service employed by Everything, running as SYSTEM, communicates with the lower privileged Everything GUI via a named pipe. The named pipe has a NULL DACL and thus provides all users full permission over it; leading to potential Service Denial Of Service or Privilege escalation(only if chained with other elements) for a local low privilege user.
CWE: CWE-269
References: https://www.voidtools.com/
CVE: CVE-2025-20725
Published: 2025-11-04
Description: In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01671924; Issue ID: MSV-4620.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20726
Published: 2025-11-04
Description: In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01672598; Issue ID: MSV-4622.
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20727
Published: 2025-11-04
Description: In Modem, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01672601; Issue ID: MSV-4623.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20728
Published: 2025-11-04
Description: In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115; Issue ID: MSV-4276.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20729
Published: 2025-11-04
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441512; Issue ID: MSV-4153.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20730
Published: 2025-11-04
Description: In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10068463; Issue ID: MSV-4141.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-287
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20731
Published: 2025-11-04
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege (when OceReducedNeighborReport is disabled). User interaction is not needed for exploitation. Patch ID: WCNCR00441511; Issue ID: MSV-4140.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20732
Published: 2025-11-04
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege (when OceReducedNeighborReport is disabled). User interaction is not needed for exploitation. Patch ID: WCNCR00441510; Issue ID: MSV-4139.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20733
Published: 2025-11-04
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00441509; Issue ID: MSV-4138.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20734
Published: 2025-11-04
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441507; Issue ID: MSV-4112.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20735
Published: 2025-11-04
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435349; Issue ID: MSV-4051.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20736
Published: 2025-11-04
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435347; Issue ID: MSV-4049.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20737
Published: 2025-11-04
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435343; Issue ID: MSV-4040.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025
CVE: CVE-2025-20738
Published: 2025-11-04
Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435342; Issue ID: MSV-4039.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/November-2025