deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-54897
Published: 2025-09-09
Description: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54897
CVE: CVE-2025-54898
Published: 2025-09-09
Description: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54898
CVE: CVE-2025-54899
Published: 2025-09-09
Description: Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-590
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54899
CVE: CVE-2025-54900
Published: 2025-09-09
Description: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54900
CVE: CVE-2025-54901
Published: 2025-09-09
Description: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54901
CVE: CVE-2025-54902
Published: 2025-09-09
Description: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54902
CVE: CVE-2025-54903
Published: 2025-09-09
Description: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54903
CVE: CVE-2025-54904
Published: 2025-09-09
Description: Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54904
CVE: CVE-2025-54905
Published: 2025-09-09
Description: Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVSS Score: 7.1 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54905
CVE: CVE-2025-54906
Published: 2025-09-09
Description: Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54906
CVE: CVE-2025-54907
Published: 2025-09-09
Description: Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54907
CVE: CVE-2025-54908
Published: 2025-09-09
Description: Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54908
CVE: CVE-2025-54910
Published: 2025-09-09
Description: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS Score: 8.4 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54910
CVE: CVE-2025-54911
Published: 2025-09-09
Description: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.3 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54911
CVE: CVE-2025-54912
Published: 2025-09-09
Description: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54912
CVE: CVE-2025-54913
Published: 2025-09-09
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54913
CVE: CVE-2025-54915
Published: 2025-09-09
Description: Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54915
CVE: CVE-2025-54916
Published: 2025-09-09
Description: Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54916
CVE: CVE-2025-54917
Published: 2025-09-09
Description: Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-693
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54917
CVE: CVE-2025-54918
Published: 2025-09-09
Description: Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54918
CVE: CVE-2025-54919
Published: 2025-09-09
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-54919
CVE: CVE-2025-55223
Published: 2025-09-09
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55223
CVE: CVE-2025-55224
Published: 2025-09-09
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55224
CVE: CVE-2025-55225
Published: 2025-09-09
Description: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55225
CVE: CVE-2025-55226
Published: 2025-09-09
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to execute code locally.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55226
CVE: CVE-2025-55227
Published: 2025-09-09
Description: Improper neutralization of special elements used in a command ('command injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55227
CVE: CVE-2025-55228
Published: 2025-09-09
Description: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55228
CVE: CVE-2025-55232
Published: 2025-09-09
Description: Deserialization of untrusted data in Microsoft High Performance Compute Pack (HPC) allows an unauthorized attacker to execute code over a network.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55232
CVE: CVE-2025-55234
Published: 2025-09-09
Description: SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks.
The SMB Server already supports mechanisms for hardening against relay attacks:

SMB Server signing
SMB Server Extended Protection for Authentication (EPA)

Microsoft is releasing this CVE to provide customers with audit capabilities to help them to assess their environment and to identify any potential device or software incompatibility issues before deploying SMB Server hardening measures that protect against relay attacks.
If you have not already enabled SMB Server hardening measures, we advise customers to take the following actions to be protected from these relay attacks:

Assess your environment by utilizing the audit capabilities that we are exposing in the September 2025 security updates.  See Support for Audit Events to deploy SMB Server Hardening—SMB Server Signing &amp; SMB Server EPA.
Adopt appropriate SMB Server hardening measures.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55234; https://www.vicarius.io/vsociety/posts/cve-2025-55234-detection-script-smb-server-vulnerability-affecting-microsoft-systems; https://www.vicarius.io/vsociety/posts/cve-2025-55234-mitigation-script-smb-server-vulnerability-affecting-microsoft-systems
CVE: CVE-2025-55236
Published: 2025-09-09
Description: Time-of-check time-of-use (toctou) race condition in Graphics Kernel allows an authorized attacker to execute code locally.
CVSS Score: 7.3 (HIGH)
CWE: CWE-367, CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55236
CVE: CVE-2025-55243
Published: 2025-09-09
Description: Exposure of sensitive information to an unauthorized actor in Microsoft Office Plus allows an unauthorized attacker to perform spoofing over a network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55243
CVE: CVE-2025-55245
Published: 2025-09-09
Description: Improper link resolution before file access ('link following') in Xbox allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55245
CVE: CVE-2025-55316
Published: 2025-09-09
Description: External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-73
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55316
CVE: CVE-2025-55317
Published: 2025-09-09
Description: Improper link resolution before file access ('link following') in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55317
CVE: CVE-2025-57057
Published: 2025-09-09
Description: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the listStr parameter in the ipMacBindListStore function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/ipMacBindListStore.md; https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/ipMacBindListStore.md
CVE: CVE-2025-57058
Published: 2025-09-09
Description: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formSetDebugCfg function via the pEnable, pLevel, and pModule parameters. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/formSetDebugCfg.md; https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/formSetDebugCfg.md
CVE: CVE-2025-57059
Published: 2025-09-09
Description: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the dhcpIndex parameter in the addDhcpRule function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/addDhcpRule.md; https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/addDhcpRule.md
CVE: CVE-2025-57061
Published: 2025-09-09
Description: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via the ruleId, ip, mac, v6 and remark parameters. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/formIPMacBindModify.md; https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/formIPMacBindModify.md
CVE: CVE-2025-57062
Published: 2025-09-09
Description: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the delDhcpIndex parameter in the formDelDhcpRule function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/formDelDhcpRule.md; https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/formDelDhcpRule.md
CVE: CVE-2025-57063
Published: 2025-09-09
Description: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the portMappingIndex parameter in the formDelPortMapping function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/formDelPortMapping.md; https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/formDelPortMapping.md
CVE: CVE-2025-57064
Published: 2025-09-09
Description: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the bindDhcpIndex parameter in the modifyDhcpRule function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/modifyDhcpRule.md; https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/modifyDhcpRule.md
CVE: CVE-2025-57069
Published: 2025-09-09
Description: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinglepppuser function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/getsinglepppuser.md; https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/getsinglepppuser.md
CVE: CVE-2025-57070
Published: 2025-09-09
Description: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the gstUp parameter in the guestWifiRuleRefresh function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/guestWifiRuleRefresh.md; https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/guestWifiRuleRefresh.md
CVE: CVE-2025-57071
Published: 2025-09-09
Description: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the vpnUsers parameter in the formAddVpnUsers function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/formAddVpnUsers.md; https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/formAddVpnUsers.md
CVE: CVE-2025-57072
Published: 2025-09-09
Description: Tenda G3 v3.0br_V15.11.0.17 was discovered to contain a stack overflow in the staticRouteGateway parameter in the formSetStaticRoute function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/formSetStaticRoute.md; https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/G3/formSetStaticRoute.md
CVE: CVE-2025-57087
Published: 2025-09-09
Description: Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the countryCode parameter in the werlessAdvancedSet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/W30E/werlessAdvancedSet.md; https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/W30E/werlessAdvancedSet.md
CVE: CVE-2025-57538
Published: 2025-09-09
Description: A stored cross-site scripting (XSS) vulnerability in the HTTP Proxy field within the Datacenter configuration panel of Proxmox Virtual Environment (PVE) 8.4 allows an authenticated user to inject malicious input. The input is stored and executed in the context of other users' browsers when they view the affected configuration page. This can lead to arbitrary JavaScript execution.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-2#post-792010; https://github.com/khankishiyev-j/bug-bounty/blob/main/proxmox-xss; https://www.youtube.com/watch?v=mN-0Zia1LZw
CVE: CVE-2025-57539
Published: 2025-09-09
Description: A stored cross-site scripting (XSS) vulnerability in the U2F Origin field of the Datacenter configuration in Proxmox Virtual Environment (PVE) 8.4 allows authenticated users to store malicious input. The payload is rendered unsafely in the Web UI and executed when viewed by other users, potentially leading to session hijacking or other attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-2#post-792010; https://github.com/khankishiyev-j/bug-bounty/blob/main/proxmox-xss; https://www.youtube.com/watch?v=-wvkN-7oT5U
CVE: CVE-2025-57540
Published: 2025-09-09
Description: A stored cross-site scripting (XSS) vulnerability exists in the WebAuthn Relying Party field within the Datacenter configuration of Proxmox Virtual Environment (PVE) 8.4. Authenticated users can inject JavaScript code that is later executed in the browsers of users who view the configuration page, enabling client-side attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-2#post-792010; https://github.com/khankishiyev-j/bug-bounty/blob/main/proxmox-xss; https://www.youtube.com/watch?v=-wvkN-7oT5U
CVE: CVE-2025-58215
Published: 2025-09-09
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Ziston ziston allows PHP Local File Inclusion.This issue affects Ziston: from n/a through < 1.4.5.
CVSS Score: 8.1 (HIGH)
CWE: CWE-98
References: https://patchstack.com/database/Wordpress/Theme/ziston/vulnerability/wordpress-ziston-theme-1-4-5-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2025-58975
Published: 2025-09-09
Description: Cross-Site Request Forgery (CSRF) vulnerability in Helmut Wandl Advanced Settings advanced-settings allows Cross Site Request Forgery.This issue affects Advanced Settings: from n/a through <= 3.1.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/advanced-settings/vulnerability/wordpress-advanced-settings-plugin-3-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2025-58976
Published: 2025-09-09
Description: Missing Authorization vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Checker by Equalize Digital: from n/a through <= 1.31.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/accessibility-checker/vulnerability/wordpress-accessibility-checker-by-equalize-digital-plugin-1-31-0-broken-access-control-vulnerability-2?_s_id=cve
CVE: CVE-2025-58977
Published: 2025-09-09
Description: Server-Side Request Forgery (SSRF) vulnerability in Rhys Wynne WP eBay Product Feeds ebay-feeds-for-wordpress allows Server Side Request Forgery.This issue affects WP eBay Product Feeds: from n/a through <= 3.4.8.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-918
References: https://patchstack.com/database/Wordpress/Plugin/ebay-feeds-for-wordpress/vulnerability/wordpress-wp-ebay-product-feeds-plugin-3-4-8-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
CVE: CVE-2025-58978
Published: 2025-09-09
Description: Missing Authorization vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF Generator for WordPress: from n/a through <= 1.5.4.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/pdf-generator-for-wp/vulnerability/wordpress-pdf-generator-for-wordpress-plugin-1-5-4-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-58979
Published: 2025-09-09
Description: Missing Authorization vulnerability in BerqWP BerqWP searchpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BerqWP: from n/a through <= 2.2.53.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/searchpro/vulnerability/wordpress-berqwp-plugin-2-2-53-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-58980
Published: 2025-09-09
Description: Missing Authorization vulnerability in recorp Export WP Page to Static HTML/CSS export-wp-page-to-static-html allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Export WP Page to Static HTML/CSS: from n/a through <= 4.1.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/export-wp-page-to-static-html/vulnerability/wordpress-export-wp-page-to-static-html-css-plugin-4-1-0-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-58981
Published: 2025-09-09
Description: Missing Authorization vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Checker by Equalize Digital: from n/a through <= 1.31.0.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/accessibility-checker/vulnerability/wordpress-accessibility-checker-by-equalize-digital-plugin-1-31-0-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-58982
Published: 2025-09-09
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pixeline Pixeline's Email Protector pixelines-email-protector allows Stored XSS.This issue affects Pixeline's Email Protector: from n/a through <= 1.3.8.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/pixelines-email-protector/vulnerability/wordpress-pixeline-s-email-protector-plugin-1-3-8-cross-site-scripting-xss-vulnerability?_s_id=cve