diff --git a/CVE-2024/CVE-2024-399xx/CVE-2024-39954.json b/CVE-2024/CVE-2024-399xx/CVE-2024-39954.json new file mode 100644 index 00000000000..c1bc7c2c107 --- /dev/null +++ b/CVE-2024/CVE-2024-399xx/CVE-2024-39954.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2024-39954", + "sourceIdentifier": "security@apache.org", + "published": "2025-08-20T09:15:27.297", + "lastModified": "2025-08-20T09:15:27.297", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "CWE-918 Server-Side Request Forgery (SSRF) in eventmesh-runtime module in WebhookUtil.java on windows\\linux\\mac os e.g. allows the attacker can abuse functionality on the server to read or update internal resources.\nUsers are recommended to upgrade to version 1.12.0 or use the master branch , which fixes this issue." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "security@apache.org", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], + "references": [ + { + "url": "https://lists.apache.org/thread/v6c96zygqx8xc2k3n2d59mgnm5txhkon", + "source": "security@apache.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-289xx/CVE-2025-28977.json b/CVE-2025/CVE-2025-289xx/CVE-2025-28977.json new file mode 100644 index 00000000000..2bbe3ad84c8 --- /dev/null +++ b/CVE-2025/CVE-2025-289xx/CVE-2025-28977.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-28977", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:28.700", + "lastModified": "2025-08-20T08:15:28.700", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress WP Pipes allows Reflected XSS. This issue affects WP Pipes: from n/a through 1.4.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-pipes/vulnerability/wordpress-wp-pipes-plugin-1-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-309xx/CVE-2025-30975.json b/CVE-2025/CVE-2025-309xx/CVE-2025-30975.json new file mode 100644 index 00000000000..038a197169a --- /dev/null +++ b/CVE-2025/CVE-2025-309xx/CVE-2025-30975.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-30975", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:29.890", + "lastModified": "2025-08-20T08:15:29.890", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in SaifuMak Add Custom Codes allows Code Injection. This issue affects Add Custom Codes: from n/a through 4.80." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/add-custom-codes/vulnerability/wordpress-add-custom-codes-4-80-arbitrary-code-execution-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-329xx/CVE-2025-32947.json b/CVE-2025/CVE-2025-329xx/CVE-2025-32947.json index 22a40a1fa0e..2120a5b410c 100644 --- a/CVE-2025/CVE-2025-329xx/CVE-2025-32947.json +++ b/CVE-2025/CVE-2025-329xx/CVE-2025-32947.json @@ -2,7 +2,7 @@ "id": "CVE-2025-32947", "sourceIdentifier": "reefs@jfrog.com", "published": "2025-04-15T15:16:09.330", - "lastModified": "2025-04-15T18:39:27.967", + "lastModified": "2025-08-20T09:15:27.513", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -42,7 +42,7 @@ "weaknesses": [ { "source": "reefs@jfrog.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -52,6 +52,10 @@ } ], "references": [ + { + "url": "https://github.com/Chocobozzz/PeerTube/commit/76226d85685220db1495025300eca784d0336f7d", + "source": "reefs@jfrog.com" + }, { "url": "https://github.com/Chocobozzz/PeerTube/releases/tag/v7.1.1", "source": "reefs@jfrog.com" diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47650.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47650.json new file mode 100644 index 00000000000..f750feab504 --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47650.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47650", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:30.087", + "lastModified": "2025-08-20T08:15:30.087", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Infility Infility Global allows Path Traversal. This issue affects Infility Global: from n/a through 2.14.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/infility-global/vulnerability/wordpress-infility-global-2-11-2-arbitrary-file-download-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48142.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48142.json new file mode 100644 index 00000000000..787626365b1 --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48142.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48142", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:30.273", + "lastModified": "2025-08-20T08:15:30.273", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in Saad Iqbal Bookify allows Privilege Escalation. This issue affects Bookify: from n/a through 1.0.9." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/bookify/vulnerability/wordpress-bookify-1-0-9-privilege-escalation-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48148.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48148.json new file mode 100644 index 00000000000..6b58665089d --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48148.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48148", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:30.460", + "lastModified": "2025-08-20T08:15:30.460", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in StoreKeeper B.V. StoreKeeper for WooCommerce allows Using Malicious Files. This issue affects StoreKeeper for WooCommerce: from n/a through 14.4.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/storekeeper-for-woocommerce/vulnerability/wordpress-storekeeper-for-woocommerce-plugin-14-4-4-arbitrary-file-upload-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48149.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48149.json new file mode 100644 index 00000000000..9aaf0e6e720 --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48149.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48149", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:30.647", + "lastModified": "2025-08-20T08:15:30.647", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in dedalx Cook&Meal allows PHP Local File Inclusion. This issue affects Cook&Meal: from n/a through 1.2.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/cookandmeal/vulnerability/wordpress-cook-meal-1-2-3-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48151.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48151.json new file mode 100644 index 00000000000..9d9167c7323 --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48151.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48151", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:30.833", + "lastModified": "2025-08-20T08:15:30.833", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM Map Locations allows Reflected XSS. This issue affects CM Map Locations: from n/a through 2.1.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/cm-map-locations/vulnerability/wordpress-cm-map-locations-2-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48152.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48152.json new file mode 100644 index 00000000000..acb82989563 --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48152.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48152", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:31.013", + "lastModified": "2025-08-20T08:15:31.013", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dimafreund Rentsyst allows Reflected XSS. This issue affects Rentsyst: from n/a through 2.0.100." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/rentsyst/vulnerability/wordpress-rentsyst-plugin-2-0-100-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48154.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48154.json new file mode 100644 index 00000000000..6ae2bd83fa3 --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48154.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48154", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:31.190", + "lastModified": "2025-08-20T08:15:31.190", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder allows Reflected XSS. This issue affects Multimedia Playlist Slider Addon for WPBakery Page Builder: from n/a through 2.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/lbg_vp_youtube_vimeo_addon_visual_composer/vulnerability/wordpress-multimedia-playlist-slider-addon-for-wpbakery-page-builder-plugin-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48157.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48157.json new file mode 100644 index 00000000000..d46dfe662f2 --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48157.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48157", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:31.367", + "lastModified": "2025-08-20T08:15:31.367", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Michele Giorgi Formality allows PHP Local File Inclusion. This issue affects Formality: from n/a through 1.5.9." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/formality/vulnerability/wordpress-formality-1-5-9-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48158.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48158.json new file mode 100644 index 00000000000..649784f3315 --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48158.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48158", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:31.540", + "lastModified": "2025-08-20T08:15:31.540", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Alex Githatu BuddyPress XProfile Custom Image Field allows Path Traversal. This issue affects BuddyPress XProfile Custom Image Field: from n/a through 3.0.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/buddypress-xprofile-image-field/vulnerability/wordpress-buddypress-xprofile-custom-image-field-plugin-3-0-1-arbitrary-file-deletion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48159.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48159.json new file mode 100644 index 00000000000..5abdbeda8ec --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48159.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48159", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:31.703", + "lastModified": "2025-08-20T08:15:31.703", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Youtube Vimeo Video Player and Slider WP Plugin allows Reflected XSS. This issue affects Youtube Vimeo Video Player and Slider WP Plugin: from n/a through 3.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/video-player-youtube-vimeo/vulnerability/wordpress-youtube-vimeo-video-player-and-slider-wp-plugin-3-8-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48160.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48160.json new file mode 100644 index 00000000000..21ab99ba153 --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48160.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48160", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:31.870", + "lastModified": "2025-08-20T08:15:31.870", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CocoBasic Caliris allows PHP Local File Inclusion. This issue affects Caliris: from n/a through 1.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/caliris-wp/vulnerability/wordpress-caliris-1-5-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48162.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48162.json new file mode 100644 index 00000000000..a696bfaa91f --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48162.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48162", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:32.037", + "lastModified": "2025-08-20T08:15:32.037", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quantumcloud Simple Business Directory Pro allows Reflected XSS. This issue affects Simple Business Directory Pro: from n/a through 15.5.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/simple-business-directory-pro/vulnerability/wordpress-simple-business-directory-pro-15-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48163.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48163.json new file mode 100644 index 00000000000..8336d67041e --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48163.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48163", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:32.200", + "lastModified": "2025-08-20T08:15:32.200", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support allows Reflected XSS. This issue affects SHOUT - HTML5 Radio Player With Ads - ShoutCast and IceCast Support: from n/a through 3.5.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/lbg-audio8-html5-radio-ads/vulnerability/wordpress-shout-html5-radio-player-with-ads-shoutcast-and-icecast-support-3-5-4-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48164.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48164.json new file mode 100644 index 00000000000..6838107292d --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48164.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48164", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:32.367", + "lastModified": "2025-08-20T08:15:32.367", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in Brainstorm Force SureDash allows Privilege Escalation. This issue affects SureDash: from n/a through 1.0.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/suredash/vulnerability/wordpress-suredash-1-0-3-privilege-escalation-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48165.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48165.json new file mode 100644 index 00000000000..897410e143e --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48165.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48165", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:32.527", + "lastModified": "2025-08-20T08:15:32.527", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in DELUCKS DELUCKS SEO allows Privilege Escalation. This issue affects DELUCKS SEO: from n/a through 2.6.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/delucks-seo/vulnerability/wordpress-delucks-seo-plugin-2-6-0-privilege-escalation-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48168.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48168.json new file mode 100644 index 00000000000..a6a6f991351 --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48168.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48168", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:32.690", + "lastModified": "2025-08-20T08:15:32.690", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Apollo - Sticky Full Width HTML5 Audio Player allows Reflected XSS. This issue affects Apollo - Sticky Full Width HTML5 Audio Player: from n/a through 3.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/lbg-audio5-html5-shoutcast-sticky/vulnerability/wordpress-apollo-sticky-full-width-html5-audio-player-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48169.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48169.json new file mode 100644 index 00000000000..490ecf9ade3 --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48169.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48169", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:32.857", + "lastModified": "2025-08-20T08:15:32.857", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in Jordy Meow Code Engine allows Remote Code Inclusion. This issue affects Code Engine: from n/a through 0.3.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.9, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.1, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/code-engine/vulnerability/wordpress-code-engine-plugin-0-3-3-remote-code-execution-rce-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48170.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48170.json new file mode 100644 index 00000000000..6b6d56eea01 --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48170.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48170", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:33.017", + "lastModified": "2025-08-20T08:15:33.017", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder allows Reflected XSS. This issue affects Universal Video Player - Addon for WPBakery Page Builder: from n/a through 3.2.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/lbg-universal-video-player-addon-visual-composer/vulnerability/wordpress-universal-video-player-addon-for-wpbakery-page-builder-3-2-1-cross-site-scripting-xss-vulnerability-2?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-481xx/CVE-2025-48171.json b/CVE-2025/CVE-2025-481xx/CVE-2025-48171.json new file mode 100644 index 00000000000..54d814a0ecd --- /dev/null +++ b/CVE-2025/CVE-2025-481xx/CVE-2025-48171.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48171", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:33.180", + "lastModified": "2025-08-20T08:15:33.180", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Cena Store allows PHP Local File Inclusion. This issue affects Cena Store: from n/a through 2.11.26." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/cena/vulnerability/wordpress-cena-store-2-11-26-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-482xx/CVE-2025-48296.json b/CVE-2025/CVE-2025-482xx/CVE-2025-48296.json new file mode 100644 index 00000000000..3ab775b8e2c --- /dev/null +++ b/CVE-2025/CVE-2025-482xx/CVE-2025-48296.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48296", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:33.347", + "lastModified": "2025-08-20T08:15:33.347", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup UpStore allows Reflected XSS. This issue affects UpStore: from n/a through 1.7.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/upstore/vulnerability/wordpress-upstore-1-7-0-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-482xx/CVE-2025-48297.json b/CVE-2025/CVE-2025-482xx/CVE-2025-48297.json new file mode 100644 index 00000000000..0c05aa71cba --- /dev/null +++ b/CVE-2025/CVE-2025-482xx/CVE-2025-48297.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48297", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:33.513", + "lastModified": "2025-08-20T08:15:33.513", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quantumcloud Simple Link Directory allows Reflected XSS. This issue affects Simple Link Directory: from n/a through n/a." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/qc-simple-link-directory/vulnerability/wordpress-simple-link-directory-14-8-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-482xx/CVE-2025-48298.json b/CVE-2025/CVE-2025-482xx/CVE-2025-48298.json new file mode 100644 index 00000000000..d3fd50a2c73 --- /dev/null +++ b/CVE-2025/CVE-2025-482xx/CVE-2025-48298.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48298", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:33.680", + "lastModified": "2025-08-20T08:15:33.680", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Benjamin Denis SEOPress for MainWP allows PHP Local File Inclusion. This issue affects SEOPress for MainWP: from n/a through 1.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/seopress-for-mainwp/vulnerability/wordpress-seopress-for-mainwp-1-4-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48302.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48302.json new file mode 100644 index 00000000000..fde85761598 --- /dev/null +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48302.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48302", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:33.843", + "lastModified": "2025-08-20T08:15:33.843", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Roxnor FundEngine allows PHP Local File Inclusion. This issue affects FundEngine: from n/a through 1.7.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-fundraising-donation/vulnerability/wordpress-fundengine-plugin-1-7-4-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49381.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49381.json new file mode 100644 index 00000000000..922359a1f89 --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49381.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49381", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:34.010", + "lastModified": "2025-08-20T08:15:34.010", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in ads.txt Guru ads.txt Guru Connect allows Cross Site Request Forgery. This issue affects ads.txt Guru Connect: from n/a through 1.1.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", + "baseScore": 9.6, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/adstxt-guru-connect/vulnerability/wordpress-ads-txt-guru-connect-plugin-1-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49382.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49382.json new file mode 100644 index 00000000000..234905e27d2 --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49382.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49382", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:34.190", + "lastModified": "2025-08-20T08:15:34.190", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in DexignZone JobZilla - Job Board WordPress Theme allows Privilege Escalation. This issue affects JobZilla - Job Board WordPress Theme: from n/a through 2.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/jobzilla/vulnerability/wordpress-jobzilla-job-board-wordpress-theme-theme-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49389.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49389.json new file mode 100644 index 00000000000..aeccaa1e845 --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49389.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49389", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:34.370", + "lastModified": "2025-08-20T08:15:34.370", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WEN Solutions Notice Bar allows Stored XSS. This issue affects Notice Bar: from n/a through 3.1.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/notice-bar/vulnerability/wordpress-notice-bar-plugin-3-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49391.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49391.json new file mode 100644 index 00000000000..3d6cdc98f86 --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49391.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49391", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:34.553", + "lastModified": "2025-08-20T08:15:34.553", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets allows Cross Site Request Forgery. This issue affects Sign-up Sheets: from n/a through 2.3.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/sign-up-sheets/vulnerability/wordpress-sign-up-sheets-plugin-2-3-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49392.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49392.json new file mode 100644 index 00000000000..a7363239347 --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49392.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49392", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:34.720", + "lastModified": "2025-08-20T08:15:34.720", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Audio Dock allows Stored XSS. This issue affects Themify Audio Dock: from n/a through 2.0.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/themify-audio-dock/vulnerability/wordpress-themify-audio-dock-plugin-2-0-5-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49395.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49395.json new file mode 100644 index 00000000000..89d25fe361e --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49395.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49395", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:34.887", + "lastModified": "2025-08-20T08:15:34.887", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Icons allows Stored XSS. This issue affects Themify Icons: from n/a through 2.0.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/themify-icons/vulnerability/wordpress-themify-icons-plugin-2-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49396.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49396.json new file mode 100644 index 00000000000..cd04c79d6b7 --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49396.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49396", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:35.047", + "lastModified": "2025-08-20T08:15:35.047", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in themifyme Themify Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Themify Builder: from n/a through 7.6.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/themify-builder/vulnerability/wordpress-themify-builder-plugin-7-6-7-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49397.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49397.json new file mode 100644 index 00000000000..1f3b491762a --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49397.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49397", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:35.210", + "lastModified": "2025-08-20T08:15:35.210", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor Alam Colorbox Lightbox allows Stored XSS. This issue affects Colorbox Lightbox: from n/a through 1.1.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-colorbox/vulnerability/wordpress-colorbox-lightbox-plugin-1-1-5-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-493xx/CVE-2025-49399.json b/CVE-2025/CVE-2025-493xx/CVE-2025-49399.json new file mode 100644 index 00000000000..86087ff5f5c --- /dev/null +++ b/CVE-2025/CVE-2025-493xx/CVE-2025-49399.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49399", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:35.373", + "lastModified": "2025-08-20T08:15:35.373", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Basix NEX-Forms allows Cross Site Request Forgery. This issue affects NEX-Forms: from n/a through 9.1.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/nex-forms-express-wp-form-builder/vulnerability/wordpress-nex-forms-plugin-9-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49400.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49400.json new file mode 100644 index 00000000000..f1b92868046 --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49400.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49400", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:35.540", + "lastModified": "2025-08-20T08:15:35.540", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in osama.esh WP Visitor Statistics (Real Time Traffic) allows Stored XSS. This issue affects WP Visitor Statistics (Real Time Traffic): from n/a through 8.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-stats-manager/vulnerability/wordpress-wp-visitor-statistics-real-time-traffic-plugin-8-2-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49406.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49406.json new file mode 100644 index 00000000000..18884dd7dce --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49406.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49406", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:35.703", + "lastModified": "2025-08-20T08:15:35.703", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in favethemes Houzez allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Houzez: from n/a through 4.1.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/houzez/vulnerability/wordpress-houzez-theme-4-1-1-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49408.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49408.json new file mode 100644 index 00000000000..6e172b3d158 --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49408.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49408", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:35.863", + "lastModified": "2025-08-20T08:15:35.863", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data. This issue affects Templately: from n/a through 3.2.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/templately/vulnerability/wordpress-templately-plugin-3-2-7-sensitive-data-exposure-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49409.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49409.json new file mode 100644 index 00000000000..3cc5eaa9620 --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49409.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49409", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:36.027", + "lastModified": "2025-08-20T08:15:36.027", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brewlabs SensorPress allows Stored XSS. This issue affects SensorPress: from n/a through 1.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/sensorpress-uptime-monitoring/vulnerability/wordpress-sensorpress-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49410.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49410.json new file mode 100644 index 00000000000..87b2b6cf4ca --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49410.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49410", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:36.190", + "lastModified": "2025-08-20T08:15:36.190", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imran Emu TC Testimonials allows Stored XSS. This issue affects TC Testimonials: from n/a through 1.1.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/tc-testimonial/vulnerability/wordpress-tc-testimonials-plugin-1-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49411.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49411.json new file mode 100644 index 00000000000..280677fc827 --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49411.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49411", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:36.353", + "lastModified": "2025-08-20T08:15:36.353", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Sharma iFrame Block allows Stored XSS. This issue affects iFrame Block: from n/a through 0.1.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/iframe-block/vulnerability/wordpress-iframe-block-plugin-0-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49412.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49412.json new file mode 100644 index 00000000000..d3e2d967cab --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49412.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49412", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:36.520", + "lastModified": "2025-08-20T08:15:36.520", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in numixtech Page Transition allows Stored XSS. This issue affects Page Transition: from n/a through 1.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/page-transition/vulnerability/wordpress-page-transition-plugin-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49413.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49413.json new file mode 100644 index 00000000000..a1a406b47cb --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49413.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49413", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:36.683", + "lastModified": "2025-08-20T08:15:36.683", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wishloop Terms of Service & Privacy Policy Generator allows Stored XSS. This issue affects Terms of Service & Privacy Policy Generator: from n/a through 1.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/terms-of-service-and-privacy-policy/vulnerability/wordpress-terms-of-service-privacy-policy-generator-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49420.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49420.json new file mode 100644 index 00000000000..7d6cd224f8a --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49420.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49420", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:36.843", + "lastModified": "2025-08-20T08:15:36.843", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pierre-Henri Lavigne Markup Markdown allows Stored XSS. This issue affects Markup Markdown: from n/a through 3.20.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/markup-markdown/vulnerability/wordpress-markup-markdown-plugin-3-20-6-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49422.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49422.json new file mode 100644 index 00000000000..3f186ec83da --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49422.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49422", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:37.003", + "lastModified": "2025-08-20T08:15:37.003", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aelora iframe Wrapper allows DOM-Based XSS. This issue affects iframe Wrapper: from n/a through 0.1.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/iframe-wrapper/vulnerability/wordpress-iframe-wrapper-plugin-0-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49424.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49424.json new file mode 100644 index 00000000000..4dcbd5da347 --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49424.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49424", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:37.170", + "lastModified": "2025-08-20T08:15:37.170", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in diego.benna Essential Doo Components for Visual Composer allows DOM-Based XSS. This issue affects Essential Doo Components for Visual Composer: from n/a through 1.9." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/animated-icon-banner-for-visual-composer/vulnerability/wordpress-essential-doo-components-for-visual-composer-plugin-1-9-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49426.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49426.json new file mode 100644 index 00000000000..1777050c7bc --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49426.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49426", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:37.340", + "lastModified": "2025-08-20T08:15:37.340", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Dourou Cookie Warning allows Cross Site Request Forgery. This issue affects Cookie Warning: from n/a through 1.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/cookie-warning/vulnerability/wordpress-cookie-warning-plugin-1-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49428.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49428.json new file mode 100644 index 00000000000..e43a6e9ba07 --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49428.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49428", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:37.493", + "lastModified": "2025-08-20T08:15:37.493", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dourou Cookie Warning allows Stored XSS. This issue affects Cookie Warning: from n/a through 1.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/cookie-warning/vulnerability/wordpress-cookie-warning-plugin-1-3-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49434.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49434.json new file mode 100644 index 00000000000..2b5b238aa97 --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49434.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49434", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:37.653", + "lastModified": "2025-08-20T08:15:37.653", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stijnvanderree Laposta WooCommerce allows Stored XSS. This issue affects Laposta WooCommerce: from n/a through 1.9.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/laposta-woocommerce/vulnerability/wordpress-laposta-woocommerce-plugin-1-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49436.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49436.json new file mode 100644 index 00000000000..b7a23941453 --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49436.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49436", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:37.817", + "lastModified": "2025-08-20T08:15:37.817", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thiudis Custom Menu allows Stored XSS. This issue affects Custom Menu: from n/a through 1.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/custom-menu/vulnerability/wordpress-custom-menu-plugin-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-494xx/CVE-2025-49438.json b/CVE-2025/CVE-2025-494xx/CVE-2025-49438.json new file mode 100644 index 00000000000..7fde304d7fd --- /dev/null +++ b/CVE-2025/CVE-2025-494xx/CVE-2025-49438.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49438", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:37.973", + "lastModified": "2025-08-20T08:15:37.973", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in Max Chirkov Simple Login Log allows Object Injection. This issue affects Simple Login Log: from n/a through 1.1.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/simple-login-log/vulnerability/wordpress-simple-login-log-plugin-1-1-3-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-498xx/CVE-2025-49889.json b/CVE-2025/CVE-2025-498xx/CVE-2025-49889.json new file mode 100644 index 00000000000..86ce9c89855 --- /dev/null +++ b/CVE-2025/CVE-2025-498xx/CVE-2025-49889.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49889", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:38.137", + "lastModified": "2025-08-20T08:15:38.137", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imaprogrammer Custom Comment allows Stored XSS. This issue affects Custom Comment: from n/a through 2.1.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/customcomment/vulnerability/wordpress-custom-comment-plugin-2-1-6-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-498xx/CVE-2025-49890.json b/CVE-2025/CVE-2025-498xx/CVE-2025-49890.json new file mode 100644 index 00000000000..9371401544b --- /dev/null +++ b/CVE-2025/CVE-2025-498xx/CVE-2025-49890.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49890", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:38.303", + "lastModified": "2025-08-20T08:15:38.303", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jorge Garcia de Bustos AWStats Script allows Stored XSS. This issue affects AWStats Script: from n/a through 0.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/awstats-script/vulnerability/wordpress-awstats-script-plugin-0-3-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-498xx/CVE-2025-49891.json b/CVE-2025/CVE-2025-498xx/CVE-2025-49891.json new file mode 100644 index 00000000000..0437b8fec14 --- /dev/null +++ b/CVE-2025/CVE-2025-498xx/CVE-2025-49891.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49891", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:38.477", + "lastModified": "2025-08-20T08:15:38.477", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in riotweb Contact Info Widget allows Stored XSS. This issue affects Contact Info Widget: from n/a through 2.6.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/simple-contact-info-widget/vulnerability/wordpress-contact-info-widget-plugin-2-6-2-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-498xx/CVE-2025-49892.json b/CVE-2025/CVE-2025-498xx/CVE-2025-49892.json new file mode 100644 index 00000000000..6bb3dfdfe7f --- /dev/null +++ b/CVE-2025/CVE-2025-498xx/CVE-2025-49892.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49892", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:38.647", + "lastModified": "2025-08-20T08:15:38.647", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in badasswp Pending Order Bot allows Stored XSS. This issue affects Pending Order Bot: from n/a through 1.0.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/pending-order-bot/vulnerability/wordpress-pending-order-bot-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-498xx/CVE-2025-49893.json b/CVE-2025/CVE-2025-498xx/CVE-2025-49893.json new file mode 100644 index 00000000000..26b6fb612d9 --- /dev/null +++ b/CVE-2025/CVE-2025-498xx/CVE-2025-49893.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49893", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:38.820", + "lastModified": "2025-08-20T08:15:38.820", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in liseperu Elizaibots allows Stored XSS. This issue affects Elizaibots: from n/a through 1.0.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/elizaibot-chatbots/vulnerability/wordpress-elizaibots-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-498xx/CVE-2025-49894.json b/CVE-2025/CVE-2025-498xx/CVE-2025-49894.json new file mode 100644 index 00000000000..ddac61104b8 --- /dev/null +++ b/CVE-2025/CVE-2025-498xx/CVE-2025-49894.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49894", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:38.997", + "lastModified": "2025-08-20T08:15:38.997", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rewish WP Emmet allows Stored XSS. This issue affects WP Emmet: from n/a through 0.3.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.7, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-emmet/vulnerability/wordpress-wp-emmet-plugin-0-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-498xx/CVE-2025-49896.json b/CVE-2025/CVE-2025-498xx/CVE-2025-49896.json new file mode 100644 index 00000000000..f568cab729c --- /dev/null +++ b/CVE-2025/CVE-2025-498xx/CVE-2025-49896.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49896", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:39.177", + "lastModified": "2025-08-20T08:15:39.177", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in wptasker WP Discord Post Plus – Supports Unlimited Channels allows Cross Site Request Forgery. This issue affects WP Discord Post Plus – Supports Unlimited Channels: from n/a through 1.0.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-discord-post-plus/vulnerability/wordpress-wp-discord-post-plus-supports-unlimited-channels-plugin-1-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-52xx/CVE-2025-5260.json b/CVE-2025/CVE-2025-52xx/CVE-2025-5260.json new file mode 100644 index 00000000000..599c47658eb --- /dev/null +++ b/CVE-2025/CVE-2025-52xx/CVE-2025-5260.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-5260", + "sourceIdentifier": "iletisim@usom.gov.tr", + "published": "2025-08-20T09:15:27.787", + "lastModified": "2025-08-20T09:15:27.787", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Server-Side Request Forgery (SSRF) vulnerability in Pik Online Yaz\u0131l\u0131m \u00c7\u00f6z\u00fcmleri A.\u015e. Pik Online allows Server Side Request Forgery.This issue affects Pik Online: before 3.1.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], + "references": [ + { + "url": "https://www.usom.gov.tr/bildirim/tr-25-0201", + "source": "iletisim@usom.gov.tr" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-52xx/CVE-2025-5261.json b/CVE-2025/CVE-2025-52xx/CVE-2025-5261.json new file mode 100644 index 00000000000..45eec8b66c9 --- /dev/null +++ b/CVE-2025/CVE-2025-52xx/CVE-2025-5261.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-5261", + "sourceIdentifier": "iletisim@usom.gov.tr", + "published": "2025-08-20T09:15:28.020", + "lastModified": "2025-08-20T09:15:28.020", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Authorization Bypass Through User-Controlled Key vulnerability in Pik Online Yaz\u0131l\u0131m \u00c7\u00f6z\u00fcmleri A.\u015e. Pik Online allows Exploitation of Trusted Identifiers.This issue affects Pik Online: before 3.1.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-639" + } + ] + } + ], + "references": [ + { + "url": "https://www.usom.gov.tr/bildirim/tr-25-0201", + "source": "iletisim@usom.gov.tr" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-531xx/CVE-2025-53194.json b/CVE-2025/CVE-2025-531xx/CVE-2025-53194.json new file mode 100644 index 00000000000..95272366e6c --- /dev/null +++ b/CVE-2025/CVE-2025-531xx/CVE-2025-53194.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53194", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:39.350", + "lastModified": "2025-08-20T08:15:39.350", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Crocoblock JetEngine allows Code Injection. This issue affects JetEngine: from n/a through 3.7.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-1336" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/jet-engine/vulnerability/wordpress-jetengine-3-7-0-remote-code-execution-rce-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-531xx/CVE-2025-53195.json b/CVE-2025/CVE-2025-531xx/CVE-2025-53195.json new file mode 100644 index 00000000000..7fb6e42d522 --- /dev/null +++ b/CVE-2025/CVE-2025-531xx/CVE-2025-53195.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53195", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:39.543", + "lastModified": "2025-08-20T08:15:39.543", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.7.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/jet-engine/vulnerability/wordpress-jetengine-plugin-3-7-0-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-531xx/CVE-2025-53196.json b/CVE-2025/CVE-2025-531xx/CVE-2025-53196.json new file mode 100644 index 00000000000..64e6f374ed6 --- /dev/null +++ b/CVE-2025/CVE-2025-531xx/CVE-2025-53196.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53196", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:39.737", + "lastModified": "2025-08-20T08:15:39.737", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetEngine allows Retrieve Embedded Sensitive Data. This issue affects JetEngine: from n/a through 3.7.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/jet-engine/vulnerability/wordpress-jetengine-3-7-0-sensitive-data-exposure-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-531xx/CVE-2025-53198.json b/CVE-2025/CVE-2025-531xx/CVE-2025-53198.json new file mode 100644 index 00000000000..765802110bc --- /dev/null +++ b/CVE-2025/CVE-2025-531xx/CVE-2025-53198.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53198", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:39.910", + "lastModified": "2025-08-20T08:15:39.910", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez allows PHP Local File Inclusion. This issue affects Houzez: from n/a through 4.0.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/houzez/vulnerability/wordpress-houzez-4-0-4-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53201.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53201.json new file mode 100644 index 00000000000..262472411f7 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53201.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53201", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:40.083", + "lastModified": "2025-08-20T08:15:40.083", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonster allows Reflected XSS. This issue affects Jobmonster: from n/a through 4.7.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/noo-jobmonster/vulnerability/wordpress-jobmonster-4-7-8-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53204.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53204.json new file mode 100644 index 00000000000..69eb60bf71d --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53204.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53204", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:40.263", + "lastModified": "2025-08-20T08:15:40.263", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme eventlist allows PHP Local File Inclusion. This issue affects eventlist: from n/a through 1.9.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/eventlist/vulnerability/wordpress-eventlist-1-9-2-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53205.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53205.json new file mode 100644 index 00000000000..b929c1ca0b0 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53205.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53205", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:40.440", + "lastModified": "2025-08-20T08:15:40.440", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Radio Player Shoutcast & Icecast allows Reflected XSS. This issue affects Radio Player Shoutcast & Icecast: from n/a through 4.4.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/lbg-audio4-html5-shoutcast/vulnerability/wordpress-radio-player-shoutcast-icecast-4-4-7-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53207.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53207.json new file mode 100644 index 00000000000..5045929266d --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53207.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53207", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:40.623", + "lastModified": "2025-08-20T08:15:40.623", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel WP Travel Gutenberg Blocks allows PHP Local File Inclusion. This issue affects WP Travel Gutenberg Blocks: from n/a through 3.9.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-travel-blocks/vulnerability/wordpress-wp-travel-gutenberg-blocks-3-9-0-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53208.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53208.json new file mode 100644 index 00000000000..38737bd5e23 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53208.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53208", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:40.797", + "lastModified": "2025-08-20T08:15:40.797", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Authorization Bypass Through User-Controlled Key vulnerability in paymayapg Maya Business allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Maya Business: from n/a through 1.2.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-639" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/paymaya-checkout-for-woocommerce/vulnerability/wordpress-maya-business-1-2-0-insecure-direct-object-references-idor-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53210.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53210.json new file mode 100644 index 00000000000..1bc42678d83 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53210.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53210", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:40.973", + "lastModified": "2025-08-20T08:15:40.973", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in bdthemes ZoloBlocks allows PHP Local File Inclusion. This issue affects ZoloBlocks: from n/a through 2.3.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/zoloblocks/vulnerability/wordpress-zoloblocks-plugin-2-3-2-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53212.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53212.json new file mode 100644 index 00000000000..284c86667bf --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53212.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53212", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:41.143", + "lastModified": "2025-08-20T08:15:41.143", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Revolution Video Player With Bottom Playlist allows Reflected XSS. This issue affects Revolution Video Player With Bottom Playlist: from n/a through 2.9.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/revolution-video-player/vulnerability/wordpress-revolution-video-player-with-bottom-playlist-2-9-2-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53213.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53213.json new file mode 100644 index 00000000000..e3f2e42bc47 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53213.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53213", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:41.313", + "lastModified": "2025-08-20T08:15:41.313", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ReachShip WooCommerce Multi-Carrier & Conditional Shipping allows Using Malicious Files. This issue affects ReachShip WooCommerce Multi-Carrier & Conditional Shipping: from n/a through 4.3.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.9, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.1, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/elex-reachship-multi-carrier-conditional-shipping/vulnerability/wordpress-reachship-woocommerce-multi-carrier-conditional-shipping-4-3-1-arbitrary-file-upload-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53226.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53226.json new file mode 100644 index 00000000000..7cd7e1fed06 --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53226.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53226", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:41.483", + "lastModified": "2025-08-20T08:15:41.483", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in digitalzoomstudio Comments Capcha Box allows Reflected XSS. This issue affects Comments Capcha Box: from n/a through 1.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/comments-capcha-box/vulnerability/wordpress-comments-capcha-box-plugin-1-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-532xx/CVE-2025-53299.json b/CVE-2025/CVE-2025-532xx/CVE-2025-53299.json new file mode 100644 index 00000000000..df52d22e3be --- /dev/null +++ b/CVE-2025/CVE-2025-532xx/CVE-2025-53299.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53299", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:41.653", + "lastModified": "2025-08-20T08:15:41.653", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in ThemeMakers ThemeMakers Visual Content Composer allows Object Injection. This issue affects ThemeMakers Visual Content Composer: from n/a through 1.5.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/tmm_content_composer/vulnerability/wordpress-thememakers-visual-content-composer-plugin-1-5-8-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-533xx/CVE-2025-53319.json b/CVE-2025/CVE-2025-533xx/CVE-2025-53319.json new file mode 100644 index 00000000000..de7bf25964e --- /dev/null +++ b/CVE-2025/CVE-2025-533xx/CVE-2025-53319.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53319", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:41.827", + "lastModified": "2025-08-20T08:15:41.827", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Raptive Raptive Ads allows Reflected XSS. This issue affects Raptive Ads: from n/a through 3.8.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/adthrive-ads/vulnerability/wordpress-raptive-ads-plugin-3-8-0-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53559.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53559.json new file mode 100644 index 00000000000..ef861d410d5 --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53559.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53559", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:41.990", + "lastModified": "2025-08-20T08:15:41.990", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder allows Reflected XSS. This issue affects Universal Video Player - Addon for WPBakery Page Builder: from n/a through 3.2.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/lbg-universal-video-player-addon-visual-composer/vulnerability/wordpress-universal-video-player-addon-for-wpbakery-page-builder-3-2-1-cross-site-scripting-xss-vulnerability-3?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53560.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53560.json new file mode 100644 index 00000000000..99ccb65f34f --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53560.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53560", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:42.173", + "lastModified": "2025-08-20T08:15:42.173", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in rascals Noisa allows Object Injection. This issue affects Noisa: from n/a through 2.6.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/noisa/vulnerability/wordpress-noisa-2-6-0-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53561.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53561.json new file mode 100644 index 00000000000..88551212a68 --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53561.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53561", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:42.360", + "lastModified": "2025-08-20T08:15:42.360", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Path Traversal vulnerability in miniOrange Prevent files / folders access allows Path Traversal. This issue affects Prevent files / folders access: from n/a through 2.6.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-35" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/prevent-file-access/vulnerability/wordpress-prevent-files-folders-access-plugin-2-6-0-path-traversal-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53562.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53562.json new file mode 100644 index 00000000000..a7f07df08af --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53562.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53562", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:42.537", + "lastModified": "2025-08-20T08:15:42.537", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder allows Reflected XSS. This issue affects Universal Video Player - Addon for WPBakery Page Builder: from n/a through 3.2.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/lbg_universal_video_player_addon_visual_composer/vulnerability/wordpress-universal-video-player-addon-for-wpbakery-page-builder-3-2-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53563.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53563.json new file mode 100644 index 00000000000..3c6545a829f --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53563.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53563", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:42.713", + "lastModified": "2025-08-20T08:15:42.713", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Youtube Vimeo Video Player and Slider allows Reflected XSS. This issue affects Youtube Vimeo Video Player and Slider: from n/a through 3.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/video_player_youtube_vimeo/vulnerability/wordpress-youtube-vimeo-video-player-and-slider-3-8-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53564.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53564.json new file mode 100644 index 00000000000..baca4385437 --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53564.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53564", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:42.880", + "lastModified": "2025-08-20T08:15:42.880", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup HTML5 Radio Player - WPBakery Page Builder Addon allows Reflected XSS. This issue affects HTML5 Radio Player - WPBakery Page Builder Addon: from n/a through 2.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/lbg_radio_player_addon_visual_composer/vulnerability/wordpress-html5-radio-player-wpbakery-page-builder-addon-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53565.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53565.json new file mode 100644 index 00000000000..3a266ee7f72 --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53565.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53565", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:43.060", + "lastModified": "2025-08-20T08:15:43.060", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Widget for Google Reviews allows PHP Local File Inclusion. This issue affects Widget for Google Reviews: from n/a through 1.0.15." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/business-reviews-wp/vulnerability/wordpress-widget-for-google-reviews-1-0-15-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53567.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53567.json new file mode 100644 index 00000000000..e0fce031957 --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53567.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53567", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:43.240", + "lastModified": "2025-08-20T08:15:43.240", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nK Ghost Kit allows PHP Local File Inclusion. This issue affects Ghost Kit: from n/a through 3.4.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/ghostkit/vulnerability/wordpress-ghost-kit-3-4-1-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53577.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53577.json new file mode 100644 index 00000000000..71255fc2ebb --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53577.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53577", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:43.410", + "lastModified": "2025-08-20T08:15:43.410", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in thehp Global DNS allows Remote Code Inclusion. This issue affects Global DNS: from n/a through 3.1.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/global-dns/vulnerability/wordpress-global-dns-plugin-3-1-0-remote-code-execution-rce-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53580.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53580.json new file mode 100644 index 00000000000..4cf3307cbab --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53580.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53580", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:43.590", + "lastModified": "2025-08-20T08:15:43.590", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro allows Privilege Escalation. This issue affects Simple Business Directory Pro: from n/a through n/a." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/simple-business-directory-pro/vulnerability/wordpress-simple-business-directory-pro-plugin-15-6-9-privilege-escalation-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-539xx/CVE-2025-53983.json b/CVE-2025/CVE-2025-539xx/CVE-2025-53983.json new file mode 100644 index 00000000000..efe0f0e516c --- /dev/null +++ b/CVE-2025/CVE-2025-539xx/CVE-2025-53983.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53983", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:43.770", + "lastModified": "2025-08-20T08:15:43.770", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetElements For Elementor allows Retrieve Embedded Sensitive Data. This issue affects JetElements For Elementor: from n/a through 2.7.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/jet-elements/vulnerability/wordpress-jetelements-for-elementor-2-7-7-sensitive-data-exposure-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-539xx/CVE-2025-53985.json b/CVE-2025/CVE-2025-539xx/CVE-2025-53985.json new file mode 100644 index 00000000000..af618566b32 --- /dev/null +++ b/CVE-2025/CVE-2025-539xx/CVE-2025-53985.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53985", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:43.947", + "lastModified": "2025-08-20T08:15:43.947", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetTabs allows Retrieve Embedded Sensitive Data. This issue affects JetTabs: from n/a through 2.2.9." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/jet-tabs/vulnerability/wordpress-jettabs-2-2-9-sensitive-data-exposure-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-539xx/CVE-2025-53987.json b/CVE-2025/CVE-2025-539xx/CVE-2025-53987.json new file mode 100644 index 00000000000..02df2a4584f --- /dev/null +++ b/CVE-2025/CVE-2025-539xx/CVE-2025-53987.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53987", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:44.110", + "lastModified": "2025-08-20T08:15:44.110", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetMenu allows Retrieve Embedded Sensitive Data. This issue affects JetMenu: from n/a through 2.4.11.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/jet-menu/vulnerability/wordpress-jetmenu-2-4-11-1-sensitive-data-exposure-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-539xx/CVE-2025-53988.json b/CVE-2025/CVE-2025-539xx/CVE-2025-53988.json new file mode 100644 index 00000000000..6dbd05f1e20 --- /dev/null +++ b/CVE-2025/CVE-2025-539xx/CVE-2025-53988.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53988", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:44.277", + "lastModified": "2025-08-20T08:15:44.277", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetBlocks For Elementor allows Retrieve Embedded Sensitive Data. This issue affects JetBlocks For Elementor: from n/a through 1.3.18." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/jet-blocks/vulnerability/wordpress-jetblocks-for-elementor-1-3-18-sensitive-data-exposure-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-539xx/CVE-2025-53992.json b/CVE-2025/CVE-2025-539xx/CVE-2025-53992.json new file mode 100644 index 00000000000..1cf8648fa5b --- /dev/null +++ b/CVE-2025/CVE-2025-539xx/CVE-2025-53992.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53992", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:44.460", + "lastModified": "2025-08-20T08:15:44.460", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetTricks allows Retrieve Embedded Sensitive Data. This issue affects JetTricks: from n/a through 1.5.4.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/jet-tricks/vulnerability/wordpress-jettricks-1-5-4-1-sensitive-data-exposure-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-539xx/CVE-2025-53993.json b/CVE-2025/CVE-2025-539xx/CVE-2025-53993.json new file mode 100644 index 00000000000..fda1c6ca2d1 --- /dev/null +++ b/CVE-2025/CVE-2025-539xx/CVE-2025-53993.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53993", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:44.647", + "lastModified": "2025-08-20T08:15:44.647", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetPopup allows Retrieve Embedded Sensitive Data. This issue affects JetPopup: from n/a through 2.0.15." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/jet-popup/vulnerability/wordpress-jetpopup-2-0-15-sensitive-data-exposure-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-539xx/CVE-2025-53998.json b/CVE-2025/CVE-2025-539xx/CVE-2025-53998.json new file mode 100644 index 00000000000..b3b00e34422 --- /dev/null +++ b/CVE-2025/CVE-2025-539xx/CVE-2025-53998.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-53998", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:44.827", + "lastModified": "2025-08-20T08:15:44.827", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetWooBuilder allows Retrieve Embedded Sensitive Data. This issue affects JetWooBuilder: from n/a through 2.1.20." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/jet-woo-builder/vulnerability/wordpress-jetwoobuilder-2-1-20-sensitive-data-exposure-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54007.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54007.json new file mode 100644 index 00000000000..2520a54d584 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54007.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54007", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:45.000", + "lastModified": "2025-08-20T08:15:45.000", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in PickPlugins Post Grid and Gutenberg Blocks allows Object Injection. This issue affects Post Grid and Gutenberg Blocks: from n/a through 2.3.11." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/post-grid/vulnerability/wordpress-post-grid-and-gutenberg-blocks-plugin-2-3-11-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54008.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54008.json new file mode 100644 index 00000000000..eee63f96cb8 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54008.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54008", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:45.177", + "lastModified": "2025-08-20T08:15:45.177", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetSmartFilters allows Retrieve Embedded Sensitive Data. This issue affects JetSmartFilters: from n/a through 3.6.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/jet-smart-filters/vulnerability/wordpress-jetsmartfilters-3-6-7-sensitive-data-exposure-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54012.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54012.json new file mode 100644 index 00000000000..61e11b753c3 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54012.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54012", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:45.350", + "lastModified": "2025-08-20T08:15:45.350", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in nanbu Welcart e-Commerce allows Object Injection. This issue affects Welcart e-Commerce: from n/a through 2.11.16." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/usc-e-shop/vulnerability/wordpress-welcart-e-commerce-plugin-2-11-16-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54014.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54014.json new file mode 100644 index 00000000000..5d73fb89f90 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54014.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54014", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:45.523", + "lastModified": "2025-08-20T08:15:45.523", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in QuanticaLabs MediCenter - Health Medical Clinic allows Object Injection. This issue affects MediCenter - Health Medical Clinic: from n/a through 15.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/medicenter/vulnerability/wordpress-medicenter-health-medical-clinic-15-1-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54017.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54017.json new file mode 100644 index 00000000000..8721e2b6ab7 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54017.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54017", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:45.690", + "lastModified": "2025-08-20T08:15:45.690", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Cozmoslabs Paid Member Subscriptions allows PHP Local File Inclusion. This issue affects Paid Member Subscriptions: from n/a through 2.15.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/paid-member-subscriptions/vulnerability/wordpress-paid-member-subscriptions-2-15-4-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54019.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54019.json new file mode 100644 index 00000000000..b872887a4ab --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54019.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54019", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:45.863", + "lastModified": "2025-08-20T08:15:45.863", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Generation of Code ('Code Injection') vulnerability in Bearsthemes Alone allows Code Injection. This issue affects Alone: from n/a through n/a." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.2, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/alone/vulnerability/wordpress-alone-7-8-5-arbitrary-code-execution-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54021.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54021.json new file mode 100644 index 00000000000..2c9d0f07b07 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54021.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54021", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:46.033", + "lastModified": "2025-08-20T08:15:46.033", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitchell Bennis Simple File List allows Path Traversal. This issue affects Simple File List: from n/a through 6.1.14." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/simple-file-list/vulnerability/wordpress-simple-file-list-6-1-14-arbitrary-file-download-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54025.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54025.json new file mode 100644 index 00000000000..ce24e92d9b4 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54025.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54025", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:46.207", + "lastModified": "2025-08-20T08:15:46.207", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Coupon Affiliates: from n/a through 6.4.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/woo-coupon-usage/vulnerability/wordpress-coupon-affiliates-plugin-6-4-0-settings-change-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54027.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54027.json new file mode 100644 index 00000000000..80438b4a50a --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54027.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54027", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:46.377", + "lastModified": "2025-08-20T08:15:46.377", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Schiocco Support Board allows Reflected XSS. This issue affects Support Board: from n/a through 3.8.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/supportboard/vulnerability/wordpress-support-board-3-8-0-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54028.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54028.json new file mode 100644 index 00000000000..89f78155e0f --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54028.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54028", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:46.557", + "lastModified": "2025-08-20T08:15:46.557", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Saleswonder Team Tobias CF7 WOW Styler allows PHP Local File Inclusion. This issue affects CF7 WOW Styler: from n/a through 1.7.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/cf7-styler/vulnerability/wordpress-cf7-wow-styler-plugin-1-7-2-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54031.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54031.json new file mode 100644 index 00000000000..a1f6fe7cd8b --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54031.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54031", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:46.730", + "lastModified": "2025-08-20T08:15:46.730", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Schiocco Support Board allows PHP Local File Inclusion. This issue affects Support Board: from n/a through 3.8.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/supportboard/vulnerability/wordpress-support-board-3-8-0-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54032.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54032.json new file mode 100644 index 00000000000..5d066e06b42 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54032.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54032", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:46.897", + "lastModified": "2025-08-20T08:15:46.897", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebCodingPlace Real Estate Manager Pro allows Reflected XSS. This issue affects Real Estate Manager Pro: from n/a through 12.7.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/real-estate-manager-pro/vulnerability/wordpress-real-estate-manager-pro-plugin-12-7-3-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54034.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54034.json new file mode 100644 index 00000000000..b48c3d8f030 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54034.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54034", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:47.070", + "lastModified": "2025-08-20T08:15:47.070", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Tribulant Software Newsletters allows PHP Local File Inclusion. This issue affects Newsletters: from n/a through 4.10." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/newsletters-lite/vulnerability/wordpress-newsletters-4-10-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54040.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54040.json new file mode 100644 index 00000000000..aea8ad296c8 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54040.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54040", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:47.243", + "lastModified": "2025-08-20T08:15:47.243", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Webba Appointment Booking Webba Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webba Booking: from n/a through 5.1.20." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/webba-booking-lite/vulnerability/wordpress-webba-booking-5-1-20-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54044.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54044.json new file mode 100644 index 00000000000..75f7c4bc999 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54044.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54044", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:47.420", + "lastModified": "2025-08-20T08:15:47.420", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in _CreativeMedia_ Elite Video Player allows Reflected XSS. This issue affects Elite Video Player: from n/a through 10.0.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/elite-video-player/vulnerability/wordpress-elite-video-player-10-0-5-cross-site-scripting-xss-vulnerability-2?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54046.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54046.json new file mode 100644 index 00000000000..115d3ea2959 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54046.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54046", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:47.600", + "lastModified": "2025-08-20T08:15:47.600", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs Cost Calculator allows Stored XSS. This issue affects Cost Calculator: from n/a through 7.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/ql-cost-calculator/vulnerability/wordpress-cost-calculator-plugin-7-4-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54048.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54048.json new file mode 100644 index 00000000000..626ced4f315 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54048.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54048", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:47.777", + "lastModified": "2025-08-20T08:15:47.777", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniOrange Custom API for WP allows SQL Injection. This issue affects Custom API for WP: from n/a through 4.2.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/custom-api-for-wp/vulnerability/wordpress-custom-api-for-wp-4-2-2-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54049.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54049.json new file mode 100644 index 00000000000..08820c0e27d --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54049.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54049", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:47.960", + "lastModified": "2025-08-20T08:15:47.960", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in miniOrange Custom API for WP allows Privilege Escalation. This issue affects Custom API for WP: from n/a through 4.2.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.9, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.1, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/custom-api-for-wp/vulnerability/wordpress-custom-api-for-wp-4-2-2-privilege-escalation-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54052.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54052.json new file mode 100644 index 00000000000..160315c9ee5 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54052.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54052", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:48.133", + "lastModified": "2025-08-20T08:15:48.133", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in Realtyna Realtyna Organic IDX plugin allows PHP Local File Inclusion. This issue affects Realtyna Organic IDX plugin: from n/a through 5.0.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/real-estate-listing-realtyna-wpl/vulnerability/wordpress-realtyna-organic-idx-plugin-plugin-5-0-0-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54053.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54053.json new file mode 100644 index 00000000000..b52e08f7a1e --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54053.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54053", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:48.310", + "lastModified": "2025-08-20T08:15:48.310", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in Adrian Tobey Groundhogg allows Object Injection. This issue affects Groundhogg: from n/a through 4.2.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.6, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.7, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/groundhogg/vulnerability/wordpress-groundhogg-4-2-2-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54055.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54055.json new file mode 100644 index 00000000000..131a1a345c7 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54055.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54055", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:48.493", + "lastModified": "2025-08-20T08:15:48.493", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Druco allows Reflected XSS. This issue affects Druco: from n/a through 1.5.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/druco/vulnerability/wordpress-druco-1-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54056.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54056.json new file mode 100644 index 00000000000..8a8dbdc4ff9 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54056.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54056", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:48.670", + "lastModified": "2025-08-20T08:15:48.670", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist allows Reflected XSS. This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through 3.5.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/lbg-audio2-html5/vulnerability/wordpress-responsive-html5-audio-player-pro-with-playlist-3-5-8-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-546xx/CVE-2025-54670.json b/CVE-2025/CVE-2025-546xx/CVE-2025-54670.json new file mode 100644 index 00000000000..d19f877b882 --- /dev/null +++ b/CVE-2025/CVE-2025-546xx/CVE-2025-54670.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54670", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:48.850", + "lastModified": "2025-08-20T08:15:48.850", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bobbingwide oik allows Reflected XSS. This issue affects oik: from n/a through 4.15.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/oik/vulnerability/wordpress-oik-plugin-4-15-2-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-546xx/CVE-2025-54677.json b/CVE-2025/CVE-2025-546xx/CVE-2025-54677.json new file mode 100644 index 00000000000..42ab164b666 --- /dev/null +++ b/CVE-2025/CVE-2025-546xx/CVE-2025-54677.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54677", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:49.030", + "lastModified": "2025-08-20T08:15:49.030", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita allows Using Malicious Files. This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through 4.5.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.1, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.3, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/meeting-scheduler-by-vcita/vulnerability/wordpress-online-booking-scheduling-calendar-for-wordpress-by-vcita-plugin-4-5-3-arbitrary-file-upload-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54713.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54713.json new file mode 100644 index 00000000000..224a1a71bab --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54713.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54713", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:49.220", + "lastModified": "2025-08-20T08:15:49.220", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce allows Authentication Abuse. This issue affects Taxi Booking Manager for WooCommerce: from n/a through 1.3.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-288" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/ecab-taxi-booking-manager/vulnerability/wordpress-taxi-booking-manager-for-woocommerce-plugin-1-3-0-broken-authentication-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54726.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54726.json new file mode 100644 index 00000000000..c0338cda771 --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54726.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54726", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:49.400", + "lastModified": "2025-08-20T08:15:49.400", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Miguel Useche JS Archive List allows SQL Injection. This issue affects JS Archive List: from n/a through n/a." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/jquery-archive-list-widget/vulnerability/wordpress-js-archive-list-plugin-6-1-6-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54735.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54735.json new file mode 100644 index 00000000000..d936a1d2ada --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54735.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54735", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:49.573", + "lastModified": "2025-08-20T08:15:49.573", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in Emraan Cheema CubeWP Framework allows Privilege Escalation. This issue affects CubeWP Framework: from n/a through 1.1.24." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/cubewp-framework/vulnerability/wordpress-cubewp-framework-plugin-1-1-24-privilege-escalation-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-547xx/CVE-2025-54750.json b/CVE-2025/CVE-2025-547xx/CVE-2025-54750.json new file mode 100644 index 00000000000..5c81f291788 --- /dev/null +++ b/CVE-2025/CVE-2025-547xx/CVE-2025-54750.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54750", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:49.747", + "lastModified": "2025-08-20T08:15:49.747", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in FunnelKit Funnel Builder by FunnelKit allows PHP Local File Inclusion. This issue affects Funnel Builder by FunnelKit: from n/a through 3.11.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/funnel-builder/vulnerability/wordpress-funnel-builder-by-funnelkit-plugin-3-11-1-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-54xx/CVE-2025-5497.json b/CVE-2025/CVE-2025-54xx/CVE-2025-5497.json index 2971dd63ab4..f3dffc5ed6c 100644 --- a/CVE-2025/CVE-2025-54xx/CVE-2025-5497.json +++ b/CVE-2025/CVE-2025-54xx/CVE-2025-5497.json @@ -2,13 +2,13 @@ "id": "CVE-2025-5497", "sourceIdentifier": "cna@vuldb.com", "published": "2025-06-03T13:15:21.310", - "lastModified": "2025-06-13T19:44:32.447", - "vulnStatus": "Analyzed", + "lastModified": "2025-08-20T09:15:28.213", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability was found in slackero phpwcms up to 1.9.45/1.10.8. It has been declared as critical. This vulnerability affects unknown code of the file include/inc_module/mod_feedimport/inc/processing.inc.php of the component Feedimport Module. The manipulation of the argument cnt_text leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.9.46 and 1.10.9 is able to address this issue. It is recommended to upgrade the affected component." + "value": "A vulnerability was detected in slackero phpwcms up to 1.9.45/1.10.8. The impacted element is an unknown function of the file include/inc_module/mod_feedimport/inc/processing.inc.php of the component Feedimport Module. Performing manipulation of the argument cnt_text results in deserialization. The attack can be initiated remotely. The exploit is now public and may be used. Upgrading to version 1.9.46 and 1.10.9 is sufficient to resolve this issue. The patch is named 41a72eca0baa9d9d0214fec97db2400bc082d2a9. It is recommended to upgrade the affected component." }, { "lang": "es", @@ -22,7 +22,7 @@ "type": "Secondary", "cvssData": { "version": "4.0", - "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", @@ -36,7 +36,7 @@ "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", - "exploitMaturity": "NOT_DEFINED", + "exploitMaturity": "PROOF_OF_CONCEPT", "confidentialityRequirement": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "availabilityRequirement": "NOT_DEFINED", @@ -181,6 +181,10 @@ "Third Party Advisory" ] }, + { + "url": "https://github.com/slackero/phpwcms/commit/41a72eca0baa9d9d0214fec97db2400bc082d2a9", + "source": "cna@vuldb.com" + }, { "url": "https://github.com/slackero/phpwcms/releases/tag/v1.10.9", "source": "cna@vuldb.com", diff --git a/CVE-2025/CVE-2025-557xx/CVE-2025-55715.json b/CVE-2025/CVE-2025-557xx/CVE-2025-55715.json new file mode 100644 index 00000000000..fa79c6d3797 --- /dev/null +++ b/CVE-2025/CVE-2025-557xx/CVE-2025-55715.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-55715", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-08-20T08:15:49.923", + "lastModified": "2025-08-20T08:15:49.923", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in Themeisle Otter - Gutenberg Block allows Retrieve Embedded Sensitive Data. This issue affects Otter - Gutenberg Block: from n/a through 3.1.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/otter-blocks/vulnerability/wordpress-otter-gutenberg-block-plugin-3-1-0-sensitive-data-exposure-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-59xx/CVE-2025-5914.json b/CVE-2025/CVE-2025-59xx/CVE-2025-5914.json index 5b8b7b43fb2..2afc6c9fa9c 100644 --- a/CVE-2025/CVE-2025-59xx/CVE-2025-5914.json +++ b/CVE-2025/CVE-2025-59xx/CVE-2025-5914.json @@ -2,7 +2,7 @@ "id": "CVE-2025-5914", "sourceIdentifier": "secalert@redhat.com", "published": "2025-06-09T20:15:26.123", - "lastModified": "2025-08-12T11:15:27.420", + "lastModified": "2025-08-20T09:15:28.647", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -19,7 +19,7 @@ "cvssMetricV31": [ { "source": "secalert@redhat.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", @@ -130,6 +130,18 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2025:14130", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:14135", + "source": "secalert@redhat.com" + }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:14137", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-5914", "source": "secalert@redhat.com", diff --git a/CVE-2025/CVE-2025-92xx/CVE-2025-9225.json b/CVE-2025/CVE-2025-92xx/CVE-2025-9225.json new file mode 100644 index 00000000000..f18eaa6928a --- /dev/null +++ b/CVE-2025/CVE-2025-92xx/CVE-2025-9225.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-9225", + "sourceIdentifier": "1b7e193f-2525-49a1-b171-84af8827c9eb", + "published": "2025-08-20T08:15:50.097", + "lastModified": "2025-08-20T08:15:50.097", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Stored cross-site scripting (XSS) in the web interface of MiR software versions prior to 3.0.0 on MiR Robots and MiR Fleet allows execution of arbitrary JavaScript code in a victim\u2019s browser" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "1b7e193f-2525-49a1-b171-84af8827c9eb", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.1, + "impactScore": 3.4 + } + ] + }, + "weaknesses": [ + { + "source": "1b7e193f-2525-49a1-b171-84af8827c9eb", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://a.storyblok.com/f/230581/x/82d4989368/msa-14.pdf", + "source": "1b7e193f-2525-49a1-b171-84af8827c9eb" + }, + { + "url": "https://supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide/", + "source": "1b7e193f-2525-49a1-b171-84af8827c9eb" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-92xx/CVE-2025-9228.json b/CVE-2025/CVE-2025-92xx/CVE-2025-9228.json new file mode 100644 index 00000000000..9f19d2447fa --- /dev/null +++ b/CVE-2025/CVE-2025-92xx/CVE-2025-9228.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-9228", + "sourceIdentifier": "1b7e193f-2525-49a1-b171-84af8827c9eb", + "published": "2025-08-20T09:15:28.953", + "lastModified": "2025-08-20T09:15:28.953", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "MiR software versions prior to version 3.0.0 have insufficient authorization controls when creating text notes, \nallowing low-privilege users to create notes which are intended only for administrative users." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "1b7e193f-2525-49a1-b171-84af8827c9eb", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "1b7e193f-2525-49a1-b171-84af8827c9eb", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://a.storyblok.com/f/230581/x/46f48d3787/msa-15.pdf", + "source": "1b7e193f-2525-49a1-b171-84af8827c9eb" + }, + { + "url": "https://supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide/", + "source": "1b7e193f-2525-49a1-b171-84af8827c9eb" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-92xx/CVE-2025-9229.json b/CVE-2025/CVE-2025-92xx/CVE-2025-9229.json new file mode 100644 index 00000000000..e59f7a91cea --- /dev/null +++ b/CVE-2025/CVE-2025-92xx/CVE-2025-9229.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-9229", + "sourceIdentifier": "1b7e193f-2525-49a1-b171-84af8827c9eb", + "published": "2025-08-20T09:15:29.180", + "lastModified": "2025-08-20T09:15:29.180", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error information, such as file paths and other data, via access to verbose error pages." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "1b7e193f-2525-49a1-b171-84af8827c9eb", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "1b7e193f-2525-49a1-b171-84af8827c9eb", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-209" + } + ] + } + ], + "references": [ + { + "url": "https://a.storyblok.com/f/230581/x/34a075d078/msa-17.pdf", + "source": "1b7e193f-2525-49a1-b171-84af8827c9eb" + }, + { + "url": "https://supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide/", + "source": "1b7e193f-2525-49a1-b171-84af8827c9eb" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 5212274b813..1024b7367a8 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-08-20T08:00:11.200059+00:00 +2025-08-20T10:00:11.077162+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-08-20T07:15:30.357000+00:00 +2025-08-20T09:15:29.180000+00:00 ``` ### Last Data Feed Release @@ -33,21 +33,47 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -306131 +306255 ``` ### CVEs added in the last Commit -Recently added CVEs: `1` +Recently added CVEs: `124` -- [CVE-2025-9202](CVE-2025/CVE-2025-92xx/CVE-2025-9202.json) (`2025-08-20T07:15:30.357`) +- [CVE-2025-54025](CVE-2025/CVE-2025-540xx/CVE-2025-54025.json) (`2025-08-20T08:15:46.207`) +- [CVE-2025-54027](CVE-2025/CVE-2025-540xx/CVE-2025-54027.json) (`2025-08-20T08:15:46.377`) +- [CVE-2025-54028](CVE-2025/CVE-2025-540xx/CVE-2025-54028.json) (`2025-08-20T08:15:46.557`) +- [CVE-2025-54031](CVE-2025/CVE-2025-540xx/CVE-2025-54031.json) (`2025-08-20T08:15:46.730`) +- [CVE-2025-54032](CVE-2025/CVE-2025-540xx/CVE-2025-54032.json) (`2025-08-20T08:15:46.897`) +- [CVE-2025-54034](CVE-2025/CVE-2025-540xx/CVE-2025-54034.json) (`2025-08-20T08:15:47.070`) +- [CVE-2025-54040](CVE-2025/CVE-2025-540xx/CVE-2025-54040.json) (`2025-08-20T08:15:47.243`) +- [CVE-2025-54044](CVE-2025/CVE-2025-540xx/CVE-2025-54044.json) (`2025-08-20T08:15:47.420`) +- [CVE-2025-54046](CVE-2025/CVE-2025-540xx/CVE-2025-54046.json) (`2025-08-20T08:15:47.600`) +- [CVE-2025-54048](CVE-2025/CVE-2025-540xx/CVE-2025-54048.json) (`2025-08-20T08:15:47.777`) +- [CVE-2025-54049](CVE-2025/CVE-2025-540xx/CVE-2025-54049.json) (`2025-08-20T08:15:47.960`) +- [CVE-2025-54052](CVE-2025/CVE-2025-540xx/CVE-2025-54052.json) (`2025-08-20T08:15:48.133`) +- [CVE-2025-54053](CVE-2025/CVE-2025-540xx/CVE-2025-54053.json) (`2025-08-20T08:15:48.310`) +- [CVE-2025-54055](CVE-2025/CVE-2025-540xx/CVE-2025-54055.json) (`2025-08-20T08:15:48.493`) +- [CVE-2025-54056](CVE-2025/CVE-2025-540xx/CVE-2025-54056.json) (`2025-08-20T08:15:48.670`) +- [CVE-2025-54670](CVE-2025/CVE-2025-546xx/CVE-2025-54670.json) (`2025-08-20T08:15:48.850`) +- [CVE-2025-54677](CVE-2025/CVE-2025-546xx/CVE-2025-54677.json) (`2025-08-20T08:15:49.030`) +- [CVE-2025-54713](CVE-2025/CVE-2025-547xx/CVE-2025-54713.json) (`2025-08-20T08:15:49.220`) +- [CVE-2025-54726](CVE-2025/CVE-2025-547xx/CVE-2025-54726.json) (`2025-08-20T08:15:49.400`) +- [CVE-2025-54735](CVE-2025/CVE-2025-547xx/CVE-2025-54735.json) (`2025-08-20T08:15:49.573`) +- [CVE-2025-54750](CVE-2025/CVE-2025-547xx/CVE-2025-54750.json) (`2025-08-20T08:15:49.747`) +- [CVE-2025-55715](CVE-2025/CVE-2025-557xx/CVE-2025-55715.json) (`2025-08-20T08:15:49.923`) +- [CVE-2025-9225](CVE-2025/CVE-2025-92xx/CVE-2025-9225.json) (`2025-08-20T08:15:50.097`) +- [CVE-2025-9228](CVE-2025/CVE-2025-92xx/CVE-2025-9228.json) (`2025-08-20T09:15:28.953`) +- [CVE-2025-9229](CVE-2025/CVE-2025-92xx/CVE-2025-9229.json) (`2025-08-20T09:15:29.180`) ### CVEs modified in the last Commit -Recently modified CVEs: `1` +Recently modified CVEs: `3` -- [CVE-2024-23942](CVE-2024/CVE-2024-239xx/CVE-2024-23942.json) (`2025-08-20T06:15:31.637`) +- [CVE-2025-32947](CVE-2025/CVE-2025-329xx/CVE-2025-32947.json) (`2025-08-20T09:15:27.513`) +- [CVE-2025-5497](CVE-2025/CVE-2025-54xx/CVE-2025-5497.json) (`2025-08-20T09:15:28.213`) +- [CVE-2025-5914](CVE-2025/CVE-2025-59xx/CVE-2025-5914.json) (`2025-08-20T09:15:28.647`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 77d5610352a..2986d65cc5a 100644 --- a/_state.csv +++ b/_state.csv @@ -253626,7 +253626,7 @@ CVE-2024-23938,0,0,5569f095c88d3edc91da7b05d4b47aad5d8c07d6eab7699149a618af2c5b0 CVE-2024-2394,0,0,2301fb69a8b0508fc8519d1f07279e4e493eb5c8262ccc983e639abf16d03f2b,2025-02-26T16:21:37.120000 CVE-2024-23940,0,0,ce578acda44eefb4ecc0c89bcbb039d72902603761c6b8411f7609e6778bcae8,2025-05-29T15:15:31.403000 CVE-2024-23941,0,0,f67188fa7336bb0ecf3483a8f18f3200ea25c746b56f7fdd851552a6ddace8b8,2025-06-04T16:15:35.160000 -CVE-2024-23942,0,1,aac23e25577f28182e05dd61deb92aeb993582fe3ff5bc0ddb09222d1543a878,2025-08-20T06:15:31.637000 +CVE-2024-23942,0,0,aac23e25577f28182e05dd61deb92aeb993582fe3ff5bc0ddb09222d1543a878,2025-08-20T06:15:31.637000 CVE-2024-23943,0,0,6d7da328c21af48ae95f23da21de015ab3069df6f76fb54c89f70c29a47af6aa,2025-03-18T11:15:39.090000 CVE-2024-23944,0,0,d087db22575c252a212d353afa43c14ce01ca6c0c7e02e40dc6dff353a6689ff,2025-07-03T15:15:22.713000 CVE-2024-23945,0,0,603a5114b87c8385f0bce592f2c9f78b3ef8e01a278258de6ede7eb2a8683e2f,2025-07-14T18:32:34.607000 @@ -266154,6 +266154,7 @@ CVE-2024-39948,0,0,83a9baca5aaa7a73093130e51be7d4abf46b111b93914895807f6f871ef3a CVE-2024-39949,0,0,3e908f72ae3fbe72ff9935b6015bb941eb885a7dfb7d749bbc854003e3734c02,2024-08-19T16:18:07.100000 CVE-2024-3995,0,0,ce01a77d8f6e67c90bd74a5b7c4f92c0ab7335d05244df806075b432360bbf96,2024-11-21T09:30:52.337000 CVE-2024-39950,0,0,bd2e265d0d3e341db8fd3fcdb0bbe9322437d77857deea077eb316ac4c626513,2024-08-19T16:15:10.800000 +CVE-2024-39954,1,1,867dce1a56ad6137bd08a518880659d5ef3d6c0567f9f7e3ff915c5e42b51dce,2025-08-20T09:15:27.297000 CVE-2024-3996,0,0,bda19efa5aac8218ffc25499dbc89ae8cf67ed11c0eb942eafa95b82919c4b2d,2025-06-04T20:35:03.570000 CVE-2024-39962,0,0,95e99a92e2a6ea9ee51034b9a2b66c5c9632cc8d9b9445742b3e8fd01ddb77b4,2025-07-09T15:30:52.603000 CVE-2024-39963,0,0,c548b05d5872bfe7f9233d0c964e3c3f6ead479dc9d409281df3fe06fdb7e8e3,2025-06-04T17:02:19.887000 @@ -291577,6 +291578,7 @@ CVE-2025-28972,0,0,3dd42a48294deab7934b4e1b7b617f2bca8d5c9775f53e8965c8cbc6973f3 CVE-2025-28974,0,0,e17e6dc9b84000fcffa09ada9585e56145630617cef399b7f12d810b2629175f,2025-06-06T14:06:58.193000 CVE-2025-28975,0,0,f775eaaa83380d9ec43e672451df43cfbbdcf30a2c618cccf2d3ad384fb880c7,2025-08-14T13:11:53.633000 CVE-2025-28976,0,0,c95f04779e300ed70599446f84f615bd0c641d098b26303813873acab7662b52,2025-07-08T16:18:53.607000 +CVE-2025-28977,1,1,031c8ad2000a9848e632cb5711c5b9f35fd321a8a6469568109887e9b95807fd,2025-08-20T08:15:28.700000 CVE-2025-28978,0,0,5f850a54db4e5d977b1048184ec5feefc4b3964c540c0c6fffac9a8096603824,2025-07-08T16:18:53.607000 CVE-2025-28979,0,0,12bd761dd30c6cfb83c53f4916b8d49caac8fdbaaf41e42db87b073f6a2f8e6c,2025-08-14T13:11:53.633000 CVE-2025-2898,0,0,47f67442cb55ba411e4669d13ef4529f1239e4e6ba72061becfb6f7e592e31cd,2025-05-16T20:02:07.950000 @@ -292928,6 +292930,7 @@ CVE-2025-30971,0,0,bdaa81d5f90f891b35dfd2da44198cf771c61350682b9305a17f8bc2d53e9 CVE-2025-30972,0,0,e0b7b3c8de8d7bc852a1a5273eb34f9b3b2a740a283c14f77136f6d3352d5782,2025-06-30T18:38:48.477000 CVE-2025-30973,0,0,a53d14045db4780b133093402090100de3be88e50b2e8f8ade7653d2c4ed6bb3,2025-07-16T14:58:59.837000 CVE-2025-30974,0,0,e789ec4b7e6f7c6c0eff1c7edf952d3dc3c73fe3b92a356d1020fdc8ba918fe4,2025-08-13T01:25:29.910000 +CVE-2025-30975,1,1,686bf21043f0e61e30e649ed21d634372a6310796f7c71eb76475cb2af169462,2025-08-20T08:15:29.890000 CVE-2025-30976,0,0,e305772f271bf5b9639627a467b70709bf0677558a54adb084f239e6182fb20a,2025-06-06T14:06:58.193000 CVE-2025-30977,0,0,0f384b592ea7d49d38cf172ba61071dd2f79b1646bf53550bc464c43bf7983b5,2025-06-06T14:06:58.193000 CVE-2025-30978,0,0,c549c9fd3c57f8b610c3f00ba61db1906f3d727e04f6668a2badb8b7cd0f0ae8,2025-06-06T14:06:58.193000 @@ -294684,7 +294687,7 @@ CVE-2025-32943,0,0,d8852a439069559de53598c8eb9931a01634d3de3418ee4fc06008afaac95 CVE-2025-32944,0,0,a344b52c148493c15473c92c02b235aae2507ae7bb79c55579809efbec515632,2025-04-15T18:39:27.967000 CVE-2025-32945,0,0,16d13d85b1ed870bbea7975f9461ec63e51cf74862480b02e7100fc9435113d1,2025-04-15T18:39:27.967000 CVE-2025-32946,0,0,ed56170a19c9001f8ee7a2863b123ca1989d528b0fb53f9c5e0f58ddcdcb7f7a,2025-04-15T18:39:27.967000 -CVE-2025-32947,0,0,a62833bd86bd02ca8e0d4494cecc0bee990eb1a1d6dd558380cfc0fed7c1973d,2025-04-15T18:39:27.967000 +CVE-2025-32947,0,1,92176f77b41868905d19fb48ae9b9f616063f80b2209bc7e5707a0e0e9790558,2025-08-20T09:15:27.513000 CVE-2025-32948,0,0,a96d86a4baf17a4ca162d7e5c669f325c2709d1929c09e18f959ed02e63890dc,2025-04-15T18:39:27.967000 CVE-2025-32949,0,0,0222e90c2d9c0c527d7d2b4498ac4ab163dcc83fea67b69555f6b95c6916eee3,2025-04-15T18:39:27.967000 CVE-2025-3295,0,0,b9cc305c81c405451f56e5642723ed5e38de00c9fc4715a78402af6083cf9c2e,2025-07-09T20:16:23.417000 @@ -299473,6 +299476,7 @@ CVE-2025-47647,0,0,bcc64494c4f45cbc11de66eb718f0e423105a061ef54de6b136715ca86a6b CVE-2025-47648,0,0,3c1dfc943823daf3366f4eed455a4c3f82064cebde832df50c0d3191570bcbef,2025-05-08T14:39:09.683000 CVE-2025-47649,0,0,a6998300a5795198f0b6b91104fdb10fcb7520b0214faea4aa3bc9ecd0a8e984,2025-05-08T14:39:09.683000 CVE-2025-4765,0,0,0837302015ce28868a75e726316131d572747335e54f82acac56a10423fbdc52,2025-05-27T19:48:26.970000 +CVE-2025-47650,1,1,979d8fd03afa5ed8f095e2a4484fdeba743642a571ef2fe2673a814a973a0935,2025-08-20T08:15:30.087000 CVE-2025-47651,0,0,375abd539d22db8e0b20a8e0d74dac0b2e7eb8b3d0ae7b53538d78123fcf253c,2025-06-12T16:06:47.857000 CVE-2025-47652,0,0,0a2e5b1a55422e9f538c1e40bd0b592ad7c15a761c500ffd7f63a2a90ec4806c,2025-07-16T14:58:59.837000 CVE-2025-47653,0,0,aea902577b09981d2973dd34a3653642f8f6a296f13c8d372934fa816515c5f5,2025-05-08T14:39:09.683000 @@ -299827,21 +299831,39 @@ CVE-2025-48139,0,0,27c6db2247d61fc78fcd73d8493e1f1bd54e06a594d1167eef9e35e16994b CVE-2025-4814,0,0,d46786303e3a6598163a80d264d357d8fd8f4577086008f748c18c8fa1a8b9bd,2025-05-28T13:17:56.110000 CVE-2025-48140,0,0,a29cda877b51f0776bee61c5994dd7d896db708e1c171df5cefeefa9152eba9d,2025-06-12T16:06:47.857000 CVE-2025-48141,0,0,e3c0aa5debd1d2cb7d0d816751febe5ca0c400edd2ee18b5b814ab5412ffb366,2025-06-12T16:06:47.857000 +CVE-2025-48142,1,1,15e9dd89147a1800c3664a96491a83502b50f4a769cbe41c63296fb9207bee4b,2025-08-20T08:15:30.273000 CVE-2025-48143,0,0,4945e05ff909df05afaeff94cfcd91ad3cd14634c19f51f496c7e38202aa7d5c,2025-06-12T16:06:47.857000 CVE-2025-48144,0,0,915ef69f7620231f2c6e2a32616b16609cf357d74e4b81e5126994688d251650,2025-05-30T15:20:12.500000 CVE-2025-48145,0,0,d19cf96b5ea8a189600a975d533ceeba8727601b694cbe4cd0ea55d286fa6f67,2025-06-17T20:50:23.507000 CVE-2025-48146,0,0,44edda46a6e454799db1266c87b76373fb03553b5180641f5297dee2b0d7de37,2025-06-06T22:23:28.070000 CVE-2025-48147,0,0,d66fc5f0d4a515039630f4bce27a90f7dd008308f73336ecb1c7033f2767da20,2025-06-12T16:06:47.857000 +CVE-2025-48148,1,1,aa48b3cdd0365ac818a4626ea6458612232e22ea3ae049d7c3bf68d379ea9491,2025-08-20T08:15:30.460000 +CVE-2025-48149,1,1,0cedba07e1d47f31e77b70caa68bcaa5d6d3f6c6c6eb372cdad3bfaf699e429b,2025-08-20T08:15:30.647000 CVE-2025-4815,0,0,31cc1cd9ba179e2e20111ed224a5d1f55b5f28081bf7ef82d4c48c2315ce9fb6,2025-05-28T17:08:54.983000 CVE-2025-48150,0,0,2d38e9b1890264ed2a66ae53c4eb6e5b4c8a071593a45b78eac186892faac683,2025-07-16T14:58:59.837000 +CVE-2025-48151,1,1,c13a3bf8622892270c3a95159b8a038b8afb0ad1102eec2579aa16cd73afc474,2025-08-20T08:15:30.833000 +CVE-2025-48152,1,1,cec30bda0e51bb1fbcd363cd4cfb4f1058e9fa06fa72d590af2ca2d4563829b9,2025-08-20T08:15:31.013000 CVE-2025-48153,0,0,2c13515dd6c0a13d0745602a2381c7ad82a11610f13866c5591f08f9f9b13e97,2025-07-16T14:58:59.837000 +CVE-2025-48154,1,1,de102d77d99ebde7104908cbd48500485c1615c90b5b71972862621088922b96,2025-08-20T08:15:31.190000 CVE-2025-48155,0,0,5880ddfb310b04759a4c835ffa0048525b5d80f018d781ae689a5348a576c92c,2025-07-16T14:58:59.837000 CVE-2025-48156,0,0,742084f7889e7d460e1053ee9cf5eebbec21b108aef72ad34faea76147b31a2d,2025-07-16T14:58:59.837000 +CVE-2025-48157,1,1,df783c7c28ff3487a93c24c2d2501e27abf4676a119ccfda9e275d96c18af5b1,2025-08-20T08:15:31.367000 +CVE-2025-48158,1,1,295b6f20d8de0d509b3846b5006af2fd6805ab42ff5742532de06a8188c876f6,2025-08-20T08:15:31.540000 +CVE-2025-48159,1,1,e81b3820db39cad074d1b9334d70fb47044230b6935b6b22c51456cca74eaf2b,2025-08-20T08:15:31.703000 CVE-2025-4816,0,0,1d7865e0cbbb0c318cb8ea40d3a767abd03ec76e1a6022bd94025fd37d41588b,2025-05-28T00:59:43.940000 +CVE-2025-48160,1,1,4fce42d37f70ecf910756fb94b61b49b0eebdb89fe2268c162ba7d823e8cacea,2025-08-20T08:15:31.870000 CVE-2025-48161,0,0,d87307d97a7c614a001ae42da5a306d0dadd3f794167347d8d1c54a2c8ca6695,2025-07-16T14:58:59.837000 +CVE-2025-48162,1,1,187e88368053597127b745159e4159d63136dba5430cf6ef0a3b8c061dc10364,2025-08-20T08:15:32.037000 +CVE-2025-48163,1,1,358f64e33ae8d84e1b606b1878b24ca6fd4793e4f128c4f4ed0045084fa45fd8,2025-08-20T08:15:32.200000 +CVE-2025-48164,1,1,c4058d9cac487ed5941f5c9fb5803fbc56b6e4b2ff3c4c9f3f3241f9b2775fe9,2025-08-20T08:15:32.367000 +CVE-2025-48165,1,1,d4781985c1151e359125cb9ca09c2e6dec10b58ddb303b5aac0869d339c4146c,2025-08-20T08:15:32.527000 CVE-2025-48166,0,0,3761d4b2de388870f57565bbdee74d35e1861c2d85d0bcf4f242af8d82ef552f,2025-07-16T14:58:59.837000 CVE-2025-48167,0,0,e003e67110485e2fc560ea6adc20dc986acbd782234a505bff1b36bc5426f11c,2025-07-16T14:58:59.837000 +CVE-2025-48168,1,1,65b14cf26f762b72c0efd32e11cb55d58f26cfe60df80263219e6f34c3bdfe9e,2025-08-20T08:15:32.690000 +CVE-2025-48169,1,1,287e8d5933b2b893d406181da525e30d3a1263da48cfe690bc39d30954d450ec,2025-08-20T08:15:32.857000 CVE-2025-4817,0,0,f265475ef28de63b3868387a0ba8131291fd27201dee770829df62b575e6a51c,2025-05-28T00:59:22.280000 +CVE-2025-48170,1,1,2829c26731abcd229a71f11ad45d9b9541de25c934688a2c276ce6c8a30969dc,2025-08-20T08:15:33.017000 +CVE-2025-48171,1,1,f4d68b3c61f3ccc5024d9b3893cb64bcbbfd1db8455a00ba82398fb22346725a,2025-08-20T08:15:33.180000 CVE-2025-48172,0,0,8b5a1f2db944c441fa5428ed217e36394a6d3f797e3e99d3485e22daa9e2e9dd,2025-07-08T16:18:53.607000 CVE-2025-48174,0,0,c3e8083f71af16819d1dd271b42b6299c82ce55401fe37929ced2b9ea25ef1fa,2025-06-04T20:02:37.147000 CVE-2025-48175,0,0,c27d60fa36a5115b45f4438bfaf90b1bca9400541c8b0eefea9c65d281f833e1,2025-06-27T15:21:28.030000 @@ -299932,10 +299954,14 @@ CVE-2025-48292,0,0,9c085b4750f647db01b66be8d03639a5aa6a0c1f2f3e142a149c80f277fcb CVE-2025-48293,0,0,2302f757195d0b4af66394052a6be102a72485573acdf27fc9d64fb7421c2f5f,2025-08-14T13:11:53.633000 CVE-2025-48294,0,0,ca362d2a907608d79a0dc1951a504a03a2fc17fa0f3946419493ae84325a1f8c,2025-07-16T14:58:59.837000 CVE-2025-48295,0,0,45aefb8be50a87b4c605ae2094926df5f2e97a7107e03cf33f441333689e11c8,2025-07-16T14:58:59.837000 +CVE-2025-48296,1,1,4ef87b62f930471d4bf9d85b5c022b634c70ede1d232b06958a7614f0bf51c9f,2025-08-20T08:15:33.347000 +CVE-2025-48297,1,1,a98752b967cae81479de6f5a0a6759a34cab7849de5f719a91b22a459df247b4,2025-08-20T08:15:33.513000 +CVE-2025-48298,1,1,b005d584d554847599a8011a5be7391e5d6f66c2ff722913463b8cb675dda6c6,2025-08-20T08:15:33.680000 CVE-2025-48299,0,0,a5327c4d41556c01c4ecc9e0ea715985782c916fa3b3b126900ab0f622c55499,2025-07-16T14:58:59.837000 CVE-2025-4830,0,0,8fe1d44111af43c6b223e14d00d9a5d1315bd90b70307a167dbf13597d5a1636,2025-05-23T15:51:24.533000 CVE-2025-48300,0,0,d2c6b3d25d1317ebeac8e66648e21e2c80dd3134817c1caef5b167fd2c273eb3,2025-07-16T14:58:59.837000 CVE-2025-48301,0,0,0516a5d0c2267a0918dd3bac817b8ab86f360d3f70575621d83fb989b4908e50,2025-07-16T14:58:59.837000 +CVE-2025-48302,1,1,7a96425af5de2a6da5989300bbc78934186eb2abee4411a8ea25a755c40ae5f8,2025-08-20T08:15:33.843000 CVE-2025-4831,0,0,6c786983aaa82bd3ed151dc0d4cfc7298f0970933e2e93e5edeaae21e32c1589,2025-05-23T15:51:12.887000 CVE-2025-4832,0,0,5d40eb0b072a9c981644738a05ce42d6d77248f4a38128aded9cccf62a96e302,2025-05-23T15:51:01.460000 CVE-2025-48328,0,0,17048bb7a62026f8a508465a37dd897b445dbfd7430f4937f92fd8ab7c1e379a,2025-06-06T14:06:58.193000 @@ -300566,28 +300592,53 @@ CVE-2025-4935,0,0,92cb90814ea6fb6d6ceddf06a94155e30e3eafd607e5ccb1da311d381c9aea CVE-2025-4936,0,0,fd9d880b7441ec1437d5f670ce3c73dd4d729c4bf41ee475585bff130ceae1f2,2025-06-05T19:39:27.940000 CVE-2025-4937,0,0,b11676149af0c28f312982d79c8f35a9ba810703d80c77681d063c82de8ef130,2025-06-05T19:42:48.337000 CVE-2025-4938,0,0,9bfbb8aefdfbb754eacbb83a30a05c557a118de2c85e31be873a9e69bcb3eeca,2025-05-28T01:33:36.677000 +CVE-2025-49381,1,1,f5b84193c5ba74b2af2745331aaf871aa073cc7c58b695a261a1d04b9bc698f0,2025-08-20T08:15:34.010000 +CVE-2025-49382,1,1,090e17c627c7726c7a44fa11ad14ded3e5de296484c4bcf88c3eba014482c5a5,2025-08-20T08:15:34.190000 CVE-2025-49384,0,0,156583dc94bdb142953a6e87a4df6b87a1ed9b52ea39a3a0a8309dc4dec168a1,2025-06-18T13:46:52.973000 CVE-2025-49385,0,0,9499db0bac8c8103af9f01ddf5769b40f7275e6c664daaf940a76fd436198f43,2025-06-18T13:46:52.973000 +CVE-2025-49389,1,1,d90b3f5e17166909c611dbd7108769d584f973082e56183864d564b7af8336f4,2025-08-20T08:15:34.370000 CVE-2025-4939,0,0,5ec31620a920403386badd8ed8c9ad70156a6e4853cf1462dcd01754dc60b7d3,2025-05-28T01:32:20.263000 +CVE-2025-49391,1,1,48d98983abfd0116c9ace2e179e9f66b094d6c06ba558a0ce0637004b705f89e,2025-08-20T08:15:34.553000 +CVE-2025-49392,1,1,83944183a8c0e19ea1343e7a1fe5b14bd5a1471ef54e2870316764b22aa6e187,2025-08-20T08:15:34.720000 +CVE-2025-49395,1,1,a09c3ecda066640959aaa41910f2974b6bbc4a13e5b9839dfb720d350e61fe57,2025-08-20T08:15:34.887000 +CVE-2025-49396,1,1,b861fcbf2c0633be1e33ea7148d5a33e59a3c3075cde6b85ce9f65abbd73ba88,2025-08-20T08:15:35.047000 +CVE-2025-49397,1,1,e21ee14bbfdb2084180858765615ef1631449f06dbb0113f8f7630cbd642ea47,2025-08-20T08:15:35.210000 +CVE-2025-49399,1,1,96f4ce3356fbff042d1998a1d83a25a1cf337a7ef36ca32255c138580262ff84,2025-08-20T08:15:35.373000 CVE-2025-4940,0,0,260d8b62a32cfda7d1f9cdbe4bba3d30912c7644fed6c87e919fb1700ed93983,2025-06-12T16:24:13.067000 +CVE-2025-49400,1,1,3fb12380e49c6a5410f41278b194ce459132c2378bfa3e811074d830e8907b74,2025-08-20T08:15:35.540000 +CVE-2025-49406,1,1,31f0744df1d10f1fa0c0b900f9c6ebcedc6961cd9a908240ba186202f835ec89,2025-08-20T08:15:35.703000 +CVE-2025-49408,1,1,81c98c55c146c3444756774e172d198bd7626e4b98e00cd59e4a80a8a6b7f5aa,2025-08-20T08:15:35.863000 +CVE-2025-49409,1,1,9124fb4358e6778ced76fbd6d09feeee023fdd6e8ffdeb9aa7f21e865df243eb,2025-08-20T08:15:36.027000 CVE-2025-4941,0,0,7ee6643b2dca5855a4c8910cf9fb3433ecd0901f54d071fbb7ffd69250830b9c,2025-05-28T01:31:03.773000 +CVE-2025-49410,1,1,e335524d356b8f6992838f097755c2b6a5ed099f0cb23b80c33fe23501e0a983,2025-08-20T08:15:36.190000 +CVE-2025-49411,1,1,21788a25df9290f44a848bb9c4edaf68f97c8be6092194f35edc36ce79f5f474,2025-08-20T08:15:36.353000 +CVE-2025-49412,1,1,3f8c65493bac2c61e599d611a893f7c5d263d1abcae34c8a39a69d1e052c9cbc,2025-08-20T08:15:36.520000 +CVE-2025-49413,1,1,f3a277505b678be63a5114cbcf3666462dc4aef56bec3b6280c971db983f6136,2025-08-20T08:15:36.683000 CVE-2025-49414,0,0,7130c226b3f4f991c9fbd39a04f6aaea40cf5afc004f93d85ba8f270e4bf265b,2025-07-08T16:18:53.607000 CVE-2025-49415,0,0,7d38eade25fb27d048d738694cace447f89049889459c31c86029c0cb0f43d1d,2025-06-17T20:50:23.507000 CVE-2025-49416,0,0,1aaf23a00d8c1d182bdcea4548893a2f9639f93e1cd838fc6136c3fcfd778515,2025-06-30T18:38:48.477000 CVE-2025-49417,0,0,1b1f9a853399580c7c9d70d8d36a41364150cfb8e8295eb4caa3b9aaacf8db4b,2025-07-08T16:18:53.607000 CVE-2025-49418,0,0,79219c5eaa5fce636dc30a24c1f2d2e4dfa1dbbfa1199dbc7ef8661bcc2c7a3e,2025-07-08T16:18:53.607000 CVE-2025-49419,0,0,85038d062ad76809afc89d292d3481b55710d3abc066574e74740256fb04fd24,2025-06-06T14:06:58.193000 +CVE-2025-49420,1,1,cf18ff21d8a77c557b345039834cb81ca2d73938006a2b308b8a1406b1ac4160,2025-08-20T08:15:36.843000 CVE-2025-49421,0,0,44f56b132253671d91321e10d79bc87df372212fcb6d1bb27ad166d07a72fc32,2025-06-06T14:06:58.193000 +CVE-2025-49422,1,1,ee353ffa2be7b39aa77877199ec3ce567b0da5bbfde372504b573d55dc5dee69,2025-08-20T08:15:37.003000 CVE-2025-49423,0,0,ac6ee00f85c55473ab88bbe3e5c40945dd96a0fec218aa704824bc0b0ffc740b,2025-06-30T18:38:48.477000 +CVE-2025-49424,1,1,2276a9b5fb819b12124fbd13a3f08d598ea135a07cfbec1a28b40ab6f7cff658,2025-08-20T08:15:37.170000 CVE-2025-49425,0,0,e1fe97c376de5a4e19ac419b1615599b7ee42807d954ef5670e99aa67f0186aa,2025-06-06T14:06:58.193000 +CVE-2025-49426,1,1,7737b092a566bf88e77244dac0dd4a78896676d7ab374a99b971b1279e1e9a2f,2025-08-20T08:15:37.340000 CVE-2025-49427,0,0,fc8aa2cea4178b9be9c92854da4245673ac0828517420b90ee0d5a6af5e8695b,2025-06-06T14:06:58.193000 +CVE-2025-49428,1,1,c2897d0ffbb12063780d7eda2fbac79c3d1f71d60a5fa9da108a3803ce57c791,2025-08-20T08:15:37.493000 CVE-2025-49429,0,0,72e428471408646b43b87d752d84f4119c531c2054284b1fa2ca291913599aae,2025-06-06T14:06:58.193000 CVE-2025-4943,0,0,4340407097d641a732a3d64a65d30b42dd912a533e30289b536536d0a1b67ff5,2025-06-04T18:31:24.923000 CVE-2025-49431,0,0,c51672966b88b8d356a2d3b2e417535023851840708582e0efebfd8f699c186b,2025-07-08T16:18:53.607000 CVE-2025-49432,0,0,4f55314afcd9d2b233ad968fa3d07dc9df449c39f2c8af40def07071b6800107,2025-08-18T20:16:28.750000 CVE-2025-49433,0,0,64f0a82f13f0ac0b75be6fe72a91fabc838c9aeec3d4106f5ba6b04c807813ad,2025-08-14T13:11:53.633000 +CVE-2025-49434,1,1,6b53c896e8a188277ce2a7a03359724055707d0fbf07327d9f838b8378d22a19,2025-08-20T08:15:37.653000 CVE-2025-49435,0,0,3d125ae356818fb0441581cec3fec2e504fbe1aa0a55596b773f33955c684bbc,2025-06-06T14:06:58.193000 +CVE-2025-49436,1,1,1260c5f28164ee422cd32f377debdca5eb07e8130aa7fbfb9d95abe0dce9e111,2025-08-20T08:15:37.817000 CVE-2025-49437,0,0,a84ad9f09f7f0c082e1dc3b4a386bb38e82a69b09cae18849befa736940e4115,2025-08-14T13:11:53.633000 +CVE-2025-49438,1,1,9dff3c275ffe7e0ffc7d9b786b03aee064dfc8e86b6de695af376853bb654e0b,2025-08-20T08:15:37.973000 CVE-2025-49439,0,0,2ce45d011a214293b10c77cabcaa7af3e67891d083356380452c41e41d5e5922,2025-06-06T14:06:58.193000 CVE-2025-4944,0,0,9a1f50eb597824061a4527d790f3f67b01a7246be2339b95cef835a527892fed,2025-05-30T16:31:03.107000 CVE-2025-49440,0,0,d94f670c6d576e1a7844a924a8674aad9b08c1e3232d530cfe91d0f7111b766d,2025-06-06T14:06:58.193000 @@ -300934,8 +300985,15 @@ CVE-2025-49885,0,0,da08e49d1f910477310ebfbd096f1902be05d4b0a6984dda682690bb8dda2 CVE-2025-49886,0,0,cb5208591e48aa4676a41b26bb79a4f254eb0072a396840a3852043090848b89,2025-06-30T18:38:48.477000 CVE-2025-49887,0,0,ace3f0e5124bc695a9b5c4a0e379391893a984d4fcb1a456ddc76a8baf016c68,2025-08-14T13:11:53.633000 CVE-2025-49888,0,0,170baa43a17ce3a7df903bb5e5086d79c6092a7eece0e12935bc6b9d3081e839,2025-07-16T14:58:59.837000 +CVE-2025-49889,1,1,ef0e33a88269c4ad3a7552d03ccff9339f5d6a59a96412e781855b9feda65410,2025-08-20T08:15:38.137000 CVE-2025-4989,0,0,74686f3d4372e905fa27c624734660eade1cfc1a7c1d6b7d7fe07ac62f07c46a,2025-05-30T16:31:03.107000 +CVE-2025-49890,1,1,5829499f2f00f99d01d945f9a18b2af3f988f72167ef068126bcbb7cdd2052ab,2025-08-20T08:15:38.303000 +CVE-2025-49891,1,1,ed5bfa069f37660ac51f15c9b01cb80ecbd64e1f47692262ce4cc6d686301b65,2025-08-20T08:15:38.477000 +CVE-2025-49892,1,1,bd4fdffe31b5381f2f32d87e6c172fbd26764127af7ca363ad34e558dafaf8b1,2025-08-20T08:15:38.647000 +CVE-2025-49893,1,1,d0fbe0b73b186d807a1792b0045e70c789ee12cbc0ec11df031b2eec89a6f7bd,2025-08-20T08:15:38.820000 +CVE-2025-49894,1,1,6d034145ad29e8b645fc5975561228ebf2785b7555036734c4185ae3e4e8558f,2025-08-20T08:15:38.997000 CVE-2025-49895,0,0,1ca763490e74c3c586c45931a6058c6027a5938ba234083d2bea200cbb6bbab0,2025-08-18T20:16:28.750000 +CVE-2025-49896,1,1,c27d701c037b8f955ee7bfe80386d899f66e128d85cb73977a0d3869e466d030,2025-08-20T08:15:39.177000 CVE-2025-49897,0,0,06013f0afb38d7d869641b4019efaa098a3b290ebb5afe81fd5b1b0d51c4afa0,2025-08-18T20:16:28.750000 CVE-2025-49898,0,0,0d59e72852f7060dc53c1f10bed2707a81314e0790eaafcc6c875011dc356269,2025-08-18T20:16:28.750000 CVE-2025-4990,0,0,11128ad236ff0bbb6407ba12ca704aae39e79d15ca91d8e93c05e36bda39beb6,2025-05-30T16:31:03.107000 @@ -301695,6 +301753,8 @@ CVE-2025-52584,0,0,54ca797905305b5d0b8a6df2125946b7ca2ff8cda99a91017191acdd20d01 CVE-2025-52585,0,0,e068f6e3c88fe1232f74d97c502a7e91da1c702d494055340a416b2c265b7225,2025-08-13T17:33:46.673000 CVE-2025-52586,0,0,57fc5e147634e1e5174a32ec42b1bdb45af72472739e6fb62fcdbb85ede868a0,2025-08-08T20:30:18.180000 CVE-2025-5259,0,0,762eb0e82b940f038c9de9747260da22e83abc89d044ade4d08f1060ed5d681a,2025-05-30T16:31:03.107000 +CVE-2025-5260,1,1,ec61d058c7c3f92bd1c6266c15cef0bb14af24630721ddaf554309c44c36b914,2025-08-20T09:15:27.787000 +CVE-2025-5261,1,1,525400dc37fce8f36a8db685b5e6d3cf604cc1f856515b4b7666a85fef2f8130,2025-08-20T09:15:28.020000 CVE-2025-52618,0,0,743c0dd81bee443eeb3cc46a2faf2e2fd8e602427f93c6165356dc1dd021f246,2025-08-18T20:16:28.750000 CVE-2025-52619,0,0,d59e8db73a3edcd2b021f8765901515fc1c86e1056c51698b6d6c7e7e2a24129,2025-08-18T20:16:28.750000 CVE-2025-5262,0,0,403269bdaef16a5d57f708bdb0abc431908dfcd570efce44bb14d0eb1f127089,2025-08-19T21:15:29.110000 @@ -302063,18 +302123,31 @@ CVE-2025-53190,0,0,e0015a34f1a9ecf2c6d518e2fd664567842552713fa8d253244e14bbd2cf4 CVE-2025-53191,0,0,808d4ee3ea927c0a433a319a12dd1846647df0ad61c498144811de78d71ae2d4,2025-08-12T14:25:33.177000 CVE-2025-53192,0,0,b4af75e10ed51c20a5c236df3a466d1287f4725773383d62e8e09815820a8754,2025-08-18T21:15:30.600000 CVE-2025-53193,0,0,e8a1858afec756a866470e301b23ba5163a056600bc99be908895db6b5b13715,2025-06-30T18:38:48.477000 +CVE-2025-53194,1,1,23cc9ac04a1d70f4ff37376808bde35311267c9b31a258fe6910150d2adfc293,2025-08-20T08:15:39.350000 +CVE-2025-53195,1,1,86f22122368b22c1210cfcdc2da9d4fc1eecb7d50db22c54dcfac7764936f82f,2025-08-20T08:15:39.543000 +CVE-2025-53196,1,1,c4dc16788a736e8e9a455f073df8f4d6678a35df4a350175db67821e5b958079,2025-08-20T08:15:39.737000 CVE-2025-53197,0,0,c72c4fa2068296a945121bdae25a00c4e4b5bc2b6a4d9dec211949fd42ccb988,2025-06-30T18:38:48.477000 +CVE-2025-53198,1,1,ad2062325aad224dc9218fcc227167b68233bdce280d547f4622de15693b73a6,2025-08-20T08:15:39.910000 CVE-2025-53199,0,0,0b13aa3fda3336c0253b39c836eef41f1f08653d0ef3393db99526fff842874f,2025-06-30T18:38:48.477000 CVE-2025-5320,0,0,772070621ad15a70df6397a0142dc45fe5fca6b991b5410b5c6912332a34a15a,2025-06-01T05:15:19.883000 CVE-2025-53200,0,0,0978ee7fbe2e4693dc10f1095162ff200a6094a70a32583414bec6bc4c3ab3e2,2025-06-30T18:38:48.477000 +CVE-2025-53201,1,1,ef608812205e9f9f0afa1ff44a312f5367c758b840b04281635a0ce64c9da549,2025-08-20T08:15:40.083000 CVE-2025-53202,0,0,8330839920ce97d6e18ca2b719a034e86a5f6ff98c8a9a428bbb9ec975c6881f,2025-06-30T18:38:48.477000 CVE-2025-53203,0,0,3066a5e0ae713dd43c66d01a142b4c33aa4af60f15bae9ce1c285859f6161179,2025-06-30T18:38:48.477000 +CVE-2025-53204,1,1,3707ac417ce6eff5b9225dd33765db3df8253c62442b45ab17a0ab0e0f6caabc,2025-08-20T08:15:40.263000 +CVE-2025-53205,1,1,6b3f9979cd69fa79af01c22ec74b4a1fa2217beb5ab48631252ed729fc3fb621,2025-08-20T08:15:40.440000 CVE-2025-53206,0,0,1d8e9afd4d5808862609505109286c8fb5bf14faa1fefc35871110b47245a7ae,2025-06-30T18:38:48.477000 +CVE-2025-53207,1,1,8b76f40ac8c187887918df929ad4030dc677933cd1d31ff62032b86c25c98d82,2025-08-20T08:15:40.623000 +CVE-2025-53208,1,1,18f72b01bbdbf0dceb1ad4127e68866f413a884fd7548ae9ccef40410f17b327,2025-08-20T08:15:40.797000 CVE-2025-5321,0,0,31d96e00ea1024b8084a7837ef9bf0b4fd55d789d529b1f4fae375684c451003,2025-06-01T05:15:20.947000 +CVE-2025-53210,1,1,6fd6670730b78375eec070a7d4952cac5235f0b5701c4967c98a9152be710de6,2025-08-20T08:15:40.973000 CVE-2025-53211,0,0,2abef6a3dfa316373b80998aadb9b980ebc2dc6ea27961810065342330691763,2025-06-30T18:38:48.477000 +CVE-2025-53212,1,1,71d47332a2df2769278595e5361e9d5d1f2bfa1906f0e2421172152f90912789,2025-08-20T08:15:41.143000 +CVE-2025-53213,1,1,1e15cd16f97ebfc66776579e63d2fb37a67e431b23056534bf533b4e743c6cd4,2025-08-20T08:15:41.313000 CVE-2025-53219,0,0,59c0b2b88c4bbb815d302c3d2c13c60683f166cf6cde2b9b26a4ecc88ae2c21e,2025-08-15T13:12:51.217000 CVE-2025-5322,0,0,6cd074297fc750e6ff1735a0dc3faa3256d1d6a3d1e92b9acf4df0a8db7d4c38,2025-07-10T15:15:29.830000 CVE-2025-53221,0,0,04154a0089b6a2b4f32c82e82cf6c9a215ceecd74dba8211e309a98c9451b145,2025-08-15T13:12:51.217000 +CVE-2025-53226,1,1,91bcec88ff0624e6137cdf4b09a5cfc1518ebd2dd0393d5e10dca1d6a4d427ad,2025-08-20T08:15:41.483000 CVE-2025-5323,0,0,b0785ba87cd1215b18904af4ecc0dec4461f38599fcb91263ef5f63563e48a70,2025-05-30T16:31:03.107000 CVE-2025-5324,0,0,78e349d2bd14065297b1365314e2e0d4a2b731776a4275b89f97d27f39ee4fa3,2025-05-30T16:31:03.107000 CVE-2025-53241,0,0,9860675b83dd27d4c6fb3241304e9e18ca731dc3f4ca536c33ac44842bc4fd6f,2025-08-15T13:12:51.217000 @@ -302124,6 +302197,7 @@ CVE-2025-53294,0,0,d9d8813955cd87745a244ad51353327145e011f34ec2117b81021892d3e6f CVE-2025-53295,0,0,81ada6604db2bcf8dca70cc44a9d02e5acc489d50dabf024ed88ab05d5b3422a,2025-06-30T18:38:48.477000 CVE-2025-53296,0,0,eca2cc82fa788a814946cb81970875312e95e57812c70ee2881f09cb4a02dee4,2025-06-30T18:38:48.477000 CVE-2025-53298,0,0,150c2315e04e7f08442a54650d8487875d2daeb20c77485e70e85b605015f9e8,2025-06-30T18:38:48.477000 +CVE-2025-53299,1,1,3842f5cade30fc7a44a4e818ee41d6df7860e7f1f5409833d17a1758bd01f650,2025-08-20T08:15:41.653000 CVE-2025-5330,0,0,e7ffe160dd4f6c3817c7e36e2e683e91c9ad47396ef2482f8a3aba919f7252b8,2025-06-23T14:37:01.860000 CVE-2025-53300,0,0,c80da7fe3cbd172e9549b6332e46bfd0a21627fd37ef0893a4be2ead997e5462,2025-06-30T18:38:48.477000 CVE-2025-53301,0,0,bba02f7685762daaeffad2d0699be86fe24b81c60cfce445ec080fd77c0ae49c,2025-06-30T18:38:48.477000 @@ -302141,6 +302215,7 @@ CVE-2025-53314,0,0,549a135e32065a263d308ebbe2d5fe243e29ba980b3cc74379ec19d5497f7 CVE-2025-53315,0,0,d000dd9a9259240095676775c3f45f3b9c3c3e6cb257e222fcb2cc6354386169,2025-06-30T18:38:48.477000 CVE-2025-53317,0,0,442eadf984bd04b5e5ddaf3230df91e027af8911e980d034cfef7daf2e247ce3,2025-06-30T18:38:48.477000 CVE-2025-53318,0,0,17691f621f2850d26af6254631a003d93275a620dedfb0430944d5a30e6c9842,2025-06-30T18:38:48.477000 +CVE-2025-53319,1,1,90a4bea55deb72247756f56339e3125a45d264ad5e37a51df99216af91cee38c,2025-08-20T08:15:41.827000 CVE-2025-5332,0,0,e1def175621c4e1d1942302bd613c0906cf0d988637a95edef4cbf91efd49e74,2025-06-04T15:37:02.583000 CVE-2025-53320,0,0,cde29a29486c9167f8a56481ff12f7849c0e5d0c65ac5c29006d68783c34782f,2025-06-30T18:38:48.477000 CVE-2025-53321,0,0,1a958bbb0309b2cd6e35c5e45afcc79ef758c432a5330d382910ccfc287fc797,2025-06-30T18:38:48.477000 @@ -302276,13 +302351,23 @@ CVE-2025-53547,0,0,da431dee127088dc3d6c2f96aff15244f3a22392ce3e60fb255d2322a07fd CVE-2025-53548,0,0,65ef6603f81358e7845bf00b46bdde9101c0ca5b5f5be84e5fdcf34b62ae572e,2025-07-10T13:17:30.017000 CVE-2025-53549,0,0,bc57f846bf2b595db414e62475c184aa00d94bbef64efccdd712e073255f53f8,2025-07-15T13:14:49.980000 CVE-2025-53558,0,0,d38fd2306b6f7122a82a4acee0b36fa4c6502592a64f13e75f418251a5a885e6,2025-07-31T18:42:37.870000 +CVE-2025-53559,1,1,4333be86042334fa16765571a22614fb88cfe0793088f250c2c827126266e1c4,2025-08-20T08:15:41.990000 CVE-2025-5356,0,0,230423e916dccb3eed4f4eea6b8b3a9d8afef34a102c6f9d5aed25dc46913046,2025-06-24T15:20:27.113000 +CVE-2025-53560,1,1,c46a35ae4d7cb95d22394ba236ef2e3b5080de4444e91d1a697fdaac0271bc02,2025-08-20T08:15:42.173000 +CVE-2025-53561,1,1,68658aeca5014cd50ea123156a1854bdd19a204c9a7f80544b7275631b5cb638,2025-08-20T08:15:42.360000 +CVE-2025-53562,1,1,0afa02f056baa378a460ded0c2d49e2f5e41ac5b2c84e39c4f7349ba92ae195a,2025-08-20T08:15:42.537000 +CVE-2025-53563,1,1,d35e47f503c520a11c8e1a92053294bae44a5d96a0c3102ef9282bd66fb00519,2025-08-20T08:15:42.713000 +CVE-2025-53564,1,1,a8b75584900e8dddca32c1f9927f048eb19514f9646d6abb4e5851d3aec36cb6,2025-08-20T08:15:42.880000 +CVE-2025-53565,1,1,4e5b9302d75aceb594918e58e604133d1b649c994660b5aa3419619b3419c6a9,2025-08-20T08:15:43.060000 CVE-2025-53566,0,0,454fc69172044556d46b17e70adb6745e5c6362d217f0ee325fd72c5ff2824d8,2025-07-08T16:18:53.607000 +CVE-2025-53567,1,1,99dbbdeecf0d8882fe358a0fc6cfa8b231edddfa5f811b2a550bab384225953e,2025-08-20T08:15:43.240000 CVE-2025-53568,0,0,ec672fa14438849d4042331d8f520ecf08d3b5cc6d344f82d58d26ad189f71b5,2025-07-08T16:18:53.607000 CVE-2025-53569,0,0,cdd0c7bd045f505f8a550a7ea0de012d1c57dbed78b7fa2473645446d7d9daf8,2025-07-08T16:18:53.607000 CVE-2025-5357,0,0,907468d4a23bb292098ec30159d44f17f5a58704c8b53f5a961af7ce379d277f,2025-06-16T16:26:46.080000 CVE-2025-53575,0,0,8a284e01cb9eb0ffb7993ec887b599da0e72f71533bfbeedab9f5eda2e23ed3e,2025-08-15T13:12:51.217000 +CVE-2025-53577,1,1,43203127d8f75edc642dda69a6cd169d9006014cc4d5b0c32107cb8c78720d2e,2025-08-20T08:15:43.410000 CVE-2025-5358,0,0,8d1b1a598434ecad4f0ae411fcaa51446d90f020f8729fd93cc9901ead4d16c2,2025-06-10T15:14:21.980000 +CVE-2025-53580,1,1,a5791a61c6bcb9e734a3371969d961034709d342b20dbc8ad0c3bae4a277f85a,2025-08-20T08:15:43.590000 CVE-2025-53581,0,0,ad8d44d6ef6b0ab2b35f66b0d1a4370637a1b2e45e3b8e964b298d88421320f2,2025-08-15T13:12:51.217000 CVE-2025-53582,0,0,b38d2103af5a68b98ca9276ae8ff9ddd36a767a226455bedf486319c7ad227dc,2025-08-15T13:12:51.217000 CVE-2025-53587,0,0,8c43507283d7c39c237f5fc4e77747c963bf62f5ce23f42d2da5f7e524632a26,2025-08-15T13:12:51.217000 @@ -302571,49 +302656,78 @@ CVE-2025-5396,0,0,7a43f31dceac2ea398188984109c158b0906a292e11df62cd3b55e539804b2 CVE-2025-53964,0,0,133489af39539ad61ce6a0026d0821548e75ea1c45c3d02476a1be01a14e7f5e,2025-07-17T21:15:50.197000 CVE-2025-5398,0,0,9195ace01e6f17d48b49ceba2edc541c15cd0bed70f8762954e659ebb09afae7,2025-07-07T15:31:31.283000 CVE-2025-53982,0,0,67c0302b2d707474ead113b99ceb36e00220859dcb5a2a0d7d2ffe637e6d4f71,2025-07-16T14:58:59.837000 +CVE-2025-53983,1,1,cf9bc74182d0a7b52b266791ba7485530c357c2392c5fa0ac9b8568e3e820aaf,2025-08-20T08:15:43.770000 CVE-2025-53984,0,0,d16bcb834b6d639fad6c10bdf6c0bf30bf7d54ccdf9b03ad8f2677b91b2ae24e,2025-07-16T14:58:59.837000 +CVE-2025-53985,1,1,bdc2eebaf30cac71daa6e00c507839fe6d10dd0d4837fa2f90655f73c1f28462,2025-08-20T08:15:43.947000 CVE-2025-53986,0,0,da66d0d09f26cd7f470d175e2767d10d57020f26c690948071f984405c93dc72,2025-07-16T14:58:59.837000 +CVE-2025-53987,1,1,8e1fe6bbda3bb04a22953147334f31eadc37f94151e6394de12a2fe137313ba8,2025-08-20T08:15:44.110000 +CVE-2025-53988,1,1,c16d9102c3215a9a1e7889b7b7510b0a47dfa27c34198b30d04bfc6487607b39,2025-08-20T08:15:44.277000 CVE-2025-53989,0,0,3bcf407f96fa0cb6e42c3cf0391bd0cdd1aaf522160ff71f169968dc30ef5e51,2025-07-16T14:58:59.837000 CVE-2025-5399,0,0,3b381024044f809f8a0acf3fe88da3229d4f8e633beaec2076b3a4a64cc13bde,2025-07-30T19:41:33.457000 CVE-2025-53990,0,0,5eef228c0d3fef0c141db148fd208cf8fa403e5ab0877978ea8bc6dbdf4b1ffa,2025-07-16T14:58:59.837000 CVE-2025-53991,0,0,3f9abd0e082831a359dc707e86112e969a75ffd8792e3a3eb3a7b905b0beec5c,2025-07-16T14:58:59.837000 +CVE-2025-53992,1,1,daade8551c6d73a123f143075a5e48d9c5185c57638b5ca2024ed40d02e34605,2025-08-20T08:15:44.460000 +CVE-2025-53993,1,1,dba8f8491493c0d4e299818c191cf88dd0d7cf81b9d89584a6e0def9f41cbf55,2025-08-20T08:15:44.647000 CVE-2025-53994,0,0,dc5b9831bdb3a9e89e234bb1d80eb309b89dc0cfe3efb26f9055818c3f5ecb8e,2025-07-16T14:58:59.837000 CVE-2025-53995,0,0,212f6954726c5e2aa7e123505a1b2088e970eae87e010b12424a6bcde80cea2a,2025-07-16T14:58:59.837000 CVE-2025-53996,0,0,32af0d56dd551c04dbc783a01d34a91d223bae18667bb17189b6ab095e33024d,2025-07-16T14:58:59.837000 CVE-2025-53997,0,0,df91d0d0349b5737b98d2705bff3769283d3596ffbebad69d6043561ff4edeb1,2025-07-16T14:58:59.837000 +CVE-2025-53998,1,1,1aa2b65119ff197498e1e37851b8f769268bfdb576b2d785c77d5f40422f6d22,2025-08-20T08:15:44.827000 CVE-2025-5400,0,0,7cd289b1f8796f433468abfa83e965b2ae8c6d02300bfc34aeb9a97484dcc2f7,2025-06-02T17:32:17.397000 CVE-2025-54006,0,0,ec64d09b55f8319c5202e187cca6133691e69d923b2015ab1035c4b4abea6b37,2025-07-16T14:58:59.837000 +CVE-2025-54007,1,1,867b4711df6a7bc6fe7a70f90617ac63c62874735642f445ad8756a65e9e2737,2025-08-20T08:15:45 +CVE-2025-54008,1,1,5dabaf230d6270d7d682f312a9a74408d2bb06d65e89684bf2a0cc3d4ac4c5c8,2025-08-20T08:15:45.177000 CVE-2025-54009,0,0,a24dc2394ce4a48667f91c31b49ecce32fba8392c530d81b89ce3d373c968ae5,2025-07-16T14:58:59.837000 CVE-2025-5401,0,0,7191cee0bc77ec5bd67bfc250972477b89f2f18db54f39596b26be9c1bb1595c,2025-06-02T17:32:17.397000 CVE-2025-54010,0,0,ff6abc0d59fafc9b8e5098e196c6ef21d7917c0851cfce71d47708332ad0a16f,2025-07-16T14:58:59.837000 CVE-2025-54011,0,0,eaa3c6fa558299aff2725abdc0370e1abdc6b760c96359d0b79f4d6d79a9306f,2025-07-16T14:58:59.837000 +CVE-2025-54012,1,1,984660772014277653825130c8ef4691f144a37341526045309ec89f575075ca,2025-08-20T08:15:45.350000 CVE-2025-54013,0,0,7cfd3da27bb09e6c78c7782763655735d93a93550f9b231b101e7ed78297133c,2025-07-16T14:58:59.837000 +CVE-2025-54014,1,1,8de9402a73bbf8d549b979a4aee248367a1d6968cad49fe2ac9503acc1a83a7b,2025-08-20T08:15:45.523000 CVE-2025-54015,0,0,1c9bff50e977c92c95ccc7e742387067df1925f67777243e73f64522ed561761,2025-07-16T14:58:59.837000 CVE-2025-54016,0,0,9f011928501846aea3e9377646ea99a4d5da8522801842b6d3505cac0f5c003b,2025-07-16T14:58:59.837000 +CVE-2025-54017,1,1,6b59a8b51e5036cd479793e43d29a4d4d7d470141d9634ec68c560dd2be18618,2025-08-20T08:15:45.690000 CVE-2025-54018,0,0,dd045c7b62bb677f8a61c9fb8c0a8624d03695b02f2539809e055da681c28c0a,2025-07-16T14:58:59.837000 +CVE-2025-54019,1,1,542d55ff193d3bea7986f8215ea2e6a78863a14c9b62a90eacb9933826c1e3f0,2025-08-20T08:15:45.863000 CVE-2025-5402,0,0,45f6783233a4afb3eb11fc05c7cd975eca906300368aad5ba6a7385cf6bfa0ef,2025-06-02T17:32:17.397000 CVE-2025-54020,0,0,5bdcb670e1f0b80b1e490d62b09f3037178882fde1d81594ff64cd6470926d1f,2025-07-16T14:58:59.837000 +CVE-2025-54021,1,1,fd5d7f56599eea4453c5eb6ab601cf973329e360a53303c6319a4fd871ec2c57,2025-08-20T08:15:46.033000 CVE-2025-54022,0,0,efbce81dfb6b3c26cf2dbd04f279de62b967b294831882df1fdb2d05a56242a7,2025-07-16T14:58:59.837000 CVE-2025-54023,0,0,5ef3c39f465832d98219626b28e9f8d5b0eadfe07428571827cc609b84b175e0,2025-07-16T14:58:59.837000 CVE-2025-54024,0,0,824d5565f4fac31ac7159d3d430b3d6b8b433b10e76117631bfff5dddbd108cf,2025-07-16T14:58:59.837000 +CVE-2025-54025,1,1,20ba4e037cde1d4f0e05c238995495f44d4f203c1411e2d7bb0e833a83ce6bda,2025-08-20T08:15:46.207000 CVE-2025-54026,0,0,957d00de626936f1c93ab9407798503a211d5dbe42b04ca2ad0977c9ce5804c9,2025-07-16T14:58:59.837000 +CVE-2025-54027,1,1,6cbdca6380713c400904f2e5cfc8d86855b88c49b1fc154e11632fef51b610cd,2025-08-20T08:15:46.377000 +CVE-2025-54028,1,1,65c7f70f172941c5f88f06bc8ff61ae293b7496ff49a4f1f4fc760bf2bb5e0b8,2025-08-20T08:15:46.557000 CVE-2025-5403,0,0,b7784092ecc6f3a87e42e7b0240fbaed09cb8cf0459833dc28f094c26d89e82c,2025-06-02T17:32:17.397000 CVE-2025-54030,0,0,32d82ddff97589076583a387b1d02056619b6938f9d44748b0d44f3cd78f22b6,2025-07-16T14:58:59.837000 +CVE-2025-54031,1,1,cbfcb9c0f3fe8234a73e8e1babd22201001eaabc9851c0b184576a6fd28cbb9d,2025-08-20T08:15:46.730000 +CVE-2025-54032,1,1,6647861d417d9d2725d3ad2b7fb71e5cf0d59416e96489d5d44e5f7c812cecf4,2025-08-20T08:15:46.897000 CVE-2025-54033,0,0,c578c1f4b9871245fac12600c6cfbe5d160cf73127cf8f9339f284680595f06e,2025-07-16T14:58:59.837000 +CVE-2025-54034,1,1,9a9d562d2c41de87a9428b4220207894c21ff2b6ba66d8e58ddcb7164b1aa3a9,2025-08-20T08:15:47.070000 CVE-2025-54035,0,0,139745c403ce94c7aaf23dde2c402d0ecda3be10cfaf9c8898e2df2cb152b15d,2025-07-16T14:58:59.837000 CVE-2025-54036,0,0,4932b84aa6fd5a597bb85df0b7ee10a7b4bbd8ef6163ed4710cf6beb7707e773,2025-07-16T14:58:59.837000 CVE-2025-54037,0,0,eeccbd876f9664418941c82e9dfdf70b64ccdd7f9e7d5ddb14a69c551b23de60,2025-07-16T14:58:59.837000 CVE-2025-54038,0,0,70bfb5bd0b10d22bc41ae296a87d0fb8cd47dd578fc699b14fc5b72dad169a67,2025-07-16T14:58:59.837000 CVE-2025-54039,0,0,4ae55fc0a5b75db1f4fa3c961025b92d1c6c04f58a718ea26d466169ee8ab503,2025-07-16T14:58:59.837000 CVE-2025-5404,0,0,ce5e31eee3c80f2ad412dfabd16b40c19d81bff9ff597bb5cde5ae7b82c11fee,2025-06-02T17:32:17.397000 +CVE-2025-54040,1,1,65f2f047be3885d3fd49e93b185ecfc3408fe08267c2354ef83a852847581ff4,2025-08-20T08:15:47.243000 CVE-2025-54041,0,0,b25576e7c5b7a2866a739abb7efb23847ee0acfdc6a5fb87c37ced436f96924d,2025-07-16T14:58:59.837000 CVE-2025-54042,0,0,1db909e0b15cd7d7976175cf4e659e23901d2da541bc8ecc965c8c00902dc94e,2025-07-16T14:58:59.837000 CVE-2025-54043,0,0,2ba543b192a4c597a08bfbdfb76231e59a74597fc439817d1c333090f7479db6,2025-07-16T14:58:59.837000 +CVE-2025-54044,1,1,1e8165756c70b9de27d64d28cc111d8c6af6d41d0fb953c1f0f30fc93c20d15a,2025-08-20T08:15:47.420000 +CVE-2025-54046,1,1,1df3358bdeaea9c86907665bb440fb6d91e8a2d629471a4a4523148992695a86,2025-08-20T08:15:47.600000 CVE-2025-54047,0,0,3ae364d16913ef3e08d7c9b8826511752104590e7b2d6dc390617611e7828174,2025-07-16T14:58:59.837000 +CVE-2025-54048,1,1,a82f5f78fb62df46db55cbd94cc4db216f53eecffb36b4c65e7cd74ca24f8372,2025-08-20T08:15:47.777000 +CVE-2025-54049,1,1,02425d9fd64a9501d81b33fd50171d8ebe76d28fc58a1e6bf157dac074fa3fa5,2025-08-20T08:15:47.960000 CVE-2025-5405,0,0,5fcaeeee8bf699a80c2fa3fe4d2798ff46c23308e1262163f6fe7f34f411bae1,2025-06-02T17:32:17.397000 CVE-2025-54050,0,0,b37058656076c6703e3ed77d30104b61027ec43efcf19d805ff03af1a2169b04,2025-08-11T19:18:27.353000 CVE-2025-54051,0,0,fc66e178f8a004756cf424dac600246286c1666555d9aa403355fdd1de2394bb,2025-07-16T14:58:59.837000 +CVE-2025-54052,1,1,e7e02b9d5ec7a064e3dbd2f0e5fac8ecf2107af909adee349f7f20a078b3a716,2025-08-20T08:15:48.133000 +CVE-2025-54053,1,1,fd83a2144727dc4380508ee6c6bfab84a3d1461fa232e4ce91829bd444f58ea8,2025-08-20T08:15:48.310000 CVE-2025-54054,0,0,cd512988483195c67bb0678e69171abca17dd94265cef64ba9dfa925c5d0617d,2025-08-15T13:12:51.217000 +CVE-2025-54055,1,1,478f569fb3112df0c23e1d3df808798944779651388286853823829e518a4fcc,2025-08-20T08:15:48.493000 +CVE-2025-54056,1,1,f12404fb4da1a0e643696da76ea66d9e1dc24ff34886f87f7521fcd97005fef8,2025-08-20T08:15:48.670000 CVE-2025-54058,0,0,54551bc905d08b35a9b59ff13f5d0f99cd06faa4c1f52db375d128cc426401f4,2025-07-30T19:57:36.920000 CVE-2025-54059,0,0,e7521325b784a60b8cf1ab44bee4a9338b70e573bec3931de470ea881a7e4eaa,2025-07-22T13:06:27.983000 CVE-2025-5406,0,0,1edf46821fa558440a179b5e9d0682cfdf7f2b95c95a4879bfa16b0a0cb5b731,2025-06-02T17:32:17.397000 @@ -302968,12 +303082,14 @@ CVE-2025-54666,0,0,4e0674297709868571ef217460806ac3fdebfb1c34f43511b012fb3ad352c CVE-2025-54667,0,0,d9343f0eff9dac45c7a649645f8ff1bc62d4093f9e0b9e88d43ae14160c769d3,2025-08-14T13:11:53.633000 CVE-2025-54668,0,0,bde617fccf4176176eca01d5fa785c7616a27375236066b290898b83512192b1,2025-08-14T13:11:53.633000 CVE-2025-54669,0,0,627358e967c009e2aed6d7f27c04788cba21929f0dd605d7a42d47fb2a23b1f6,2025-08-14T13:11:53.633000 +CVE-2025-54670,1,1,6beefe08ee7a3cfefa36d4256a1b8cd4a55765af47996a5d3d0dfb9a78a3a5bf,2025-08-20T08:15:48.850000 CVE-2025-54671,0,0,6e4ef25e3dbc75df5a9d799044ac44e2702e3815d0cef37000dbf5895d249ee8,2025-08-14T13:11:53.633000 CVE-2025-54672,0,0,85ed248e0348da8e8795c749c246076e367565db53c6c5b6730524e7309d44b3,2025-08-14T13:11:53.633000 CVE-2025-54673,0,0,727cb1ab80a91da3cc3807cee60b32d17f5b133d8e86b29aa075b3265267e3fb,2025-08-14T13:11:53.633000 CVE-2025-54674,0,0,5a4505826219e7655ee2e2253dd0ea4d294fbada8e96f4acd2713bd0e96afb4e,2025-08-14T13:11:53.633000 CVE-2025-54675,0,0,009a1edda95d8fdbaed15eca043dde07ba6c9df87dc8ba14a09d830b810c16cb,2025-08-14T13:11:53.633000 CVE-2025-54676,0,0,a3bfa3d8ee23d95be2c0aa4cec1de30f7818a672d63e522b43f76cb75e976e8f,2025-08-14T13:11:53.633000 +CVE-2025-54677,1,1,dee1d6837b82f9e24c1eb09508ae3a2efa1ce4b3b19de9bf59190bbdd03f0c1d,2025-08-20T08:15:49.030000 CVE-2025-54678,0,0,1f3f5492b929775bc2b0686a319d2dd7b53421e55635f26cf4e8e3e0b21d973b,2025-08-14T13:11:53.633000 CVE-2025-54679,0,0,e1a2d64a616ef2a53e019ab57e0093d27df3edefd1dfdd0b4b914558fe3d29c3,2025-08-14T13:11:53.633000 CVE-2025-5468,0,0,22560bf107234a5d8c91a7e753442b0ba8e4f6b9641c18738e16c5c943cd79e1,2025-08-13T17:34:12.350000 @@ -303007,15 +303123,18 @@ CVE-2025-54706,0,0,78f88fc6392fdd2ce2714ac3230960e007c00421fbb49b89da7bb96c8fc03 CVE-2025-54707,0,0,0b691f260544cfc823c3ac94eed415a9167cc03e36262c2b4e4d6154a53a8bf3,2025-08-14T13:11:53.633000 CVE-2025-54708,0,0,e988fa4ccd1f6df62fc97748bde2e25990820ccd86adc54beb1b74a78e27a680,2025-08-15T13:12:51.217000 CVE-2025-54712,0,0,407bf224dfdf9ff2779d8aa2ab669db812d315ed94be78c4ec6957b516788b08,2025-08-15T13:12:51.217000 +CVE-2025-54713,1,1,5a22b5130c71a02311453e0723a1f376a2918144c9682c6806d0db3e8545dae1,2025-08-20T08:15:49.220000 CVE-2025-54715,0,0,195e92a3f8756c3fb541afbeb41142e80389b63220a4fe5e67ace740f0f2ced8,2025-08-15T13:12:51.217000 CVE-2025-54717,0,0,659c09ca0d7bc5f7682ae1bf70ac8da1749323ee2a58b941d152d70dcf049ff0,2025-08-15T13:12:51.217000 CVE-2025-5472,0,0,c39055ebd5fae443bf4b609e0014fd18a2e9cd9efe8880b7c304eba6a432be09,2025-07-30T20:03:35.977000 +CVE-2025-54726,1,1,fbc78143351cb34ec7c5319d553de140bca743644a9c6bbcb689a1932ab6aa4a,2025-08-20T08:15:49.400000 CVE-2025-54727,0,0,7ebb4ae604c462e0e8e15c77412f8ab7cae9bcd1dfe0aad18831a776cf1c22ee,2025-08-15T13:12:51.217000 CVE-2025-54728,0,0,b2b3ecb49051f8a6b7e6f3b5796742c7fc2e047a814e63d0c3b7f60c930c129b,2025-08-15T13:12:51.217000 CVE-2025-54729,0,0,127723cb8e826c0186893a2b16bb2088dfa25f1f9fd561d134d16c817dbf89e1,2025-08-15T13:12:51.217000 CVE-2025-5473,0,0,7cdfa0a3a4ee84c7c9b0e530484cb2042339c6a0c538f4a18fcb7511d663c8f0,2025-08-18T16:00:12.040000 CVE-2025-54730,0,0,9e4aec02eec3d418d1fc27704462c5960e6c63c06aec5e792c80f019d54d0475,2025-08-15T13:12:51.217000 CVE-2025-54732,0,0,5c68ff14c8b197de299b275ef5e27e5e6bbc7e57ddd540d9dba19ede7a4f5f83,2025-08-15T13:12:51.217000 +CVE-2025-54735,1,1,5596e5d92de233729c584a98476240366f9bebd9269fb14d849d9dff911dd493,2025-08-20T08:15:49.573000 CVE-2025-54736,0,0,cb2b0789112a7394d815a497577c346e21adb67062cca7939bb6160b0e2155ed,2025-08-15T13:12:51.217000 CVE-2025-54739,0,0,5695f8447365c386de12585969cdcd0f64df7a0524eb04200aa789a37c1775cc,2025-08-15T13:12:51.217000 CVE-2025-5474,0,0,9881f2784286ea995078649507a493c56d06fa4b1251e02a33e0c2bb4b492ffd,2025-08-18T15:59:55.057000 @@ -303024,6 +303143,7 @@ CVE-2025-54746,0,0,5ee6d28ee13d7309fd48e37a3b0532dd636608a2935fde0ada00442972ef9 CVE-2025-54747,0,0,2c7daeb6c9672e8f75a6944000651021c50a0aef600b61ee82f750f0de5a3902,2025-08-15T13:12:51.217000 CVE-2025-54749,0,0,e41cabc4fb8bcbfdccb1549db6a207c46a8de134035b007c79082566f680bba8,2025-08-15T13:12:51.217000 CVE-2025-5475,0,0,4979d4c3ee2147d07e9129970ba91c083cf6d4c91316446a1b1dceb7d7112c51,2025-07-08T14:30:38.823000 +CVE-2025-54750,1,1,39f54a955671a76394b30a83c9310f772d87461c9dfa5e5ffc941c029a6f2126,2025-08-20T08:15:49.747000 CVE-2025-54752,0,0,9914e3b7bbef908710fb6aece3ca1eadd568dd8eefbcf9193d2ef1d95114b6d4,2025-08-06T16:41:58.223000 CVE-2025-54757,0,0,cf89f5668786415b57af39eeacfe12fb095e82a6282b09acd06dc90602627d45,2025-08-06T16:41:45.987000 CVE-2025-54759,0,0,f75b9f44a351a31195477ec1610e50042e1228b519eb9697d20402967e8d7d33,2025-08-19T13:42:47.510000 @@ -303129,7 +303249,7 @@ CVE-2025-54956,0,0,653267e6116d71780f935491e6448610273e93fb17194ea28638b5b7bb5d2 CVE-2025-54958,0,0,d754a1281c62e385a58f163c3e408a5c11d2f2bb60998a9e488b28a2302deba8,2025-08-08T20:30:18.180000 CVE-2025-54959,0,0,62b944cfc8a46cda88d3ec332238de4568c10b3433487d3ea67c01462d71c142,2025-08-08T20:30:18.180000 CVE-2025-54962,0,0,758fa9e1c05a0c58dd794f937b3086d72bae4cf9ae7f2a8e2f0a2425c9993c44,2025-08-04T15:06:15.833000 -CVE-2025-5497,0,0,87b49746aa2b3c5f83d3de36e7513cd865b0483776b20322628493a007ccd7e0,2025-06-13T19:44:32.447000 +CVE-2025-5497,0,1,a5a489455de67fc5f2c75625a09d2f78af3fac1d986fa9288d403c700711930f,2025-08-20T09:15:28.213000 CVE-2025-54974,0,0,d89aba17142603c1b92cd59622d3a6ec2fd62d5f934ba7cd8ed9696b0ec9d15e,2025-08-05T04:16:07.123000 CVE-2025-54975,0,0,51314dbc39080c5ef951019ec10b4054c3912e95372fd513533a7416a1be3828,2025-08-05T04:16:11.863000 CVE-2025-54976,0,0,1fa6f2e419316d430deea8cf23cf112c001f58284f515c28c3b7af7a4bffbab6,2025-08-05T04:16:12.007000 @@ -303325,6 +303445,7 @@ CVE-2025-55711,0,0,7422ad4ce814375d4ad2e81e6362b01b87c47e4d873a772ab2691ec059424 CVE-2025-55712,0,0,03f8cbac3fb219dfade5ea686ec28c5d6f363fc3030ec00d3c23392d9332e0de,2025-08-15T13:12:51.217000 CVE-2025-55713,0,0,b4057cd0189a2259f4b8b0a9df96dfc465d41c9ec84bd1084e5d9bfa21b74b3a,2025-08-15T13:12:51.217000 CVE-2025-55714,0,0,3b8a79e07a386c3df9e308b0b528f5125d67db602b544e06f4bf2ba7df21b92e,2025-08-15T13:12:51.217000 +CVE-2025-55715,1,1,9ec812847313c7e0b52bb7ac50a3872dcbbaff142950ce12586db3b3045596cc,2025-08-20T08:15:49.923000 CVE-2025-55716,0,0,3341ba2691d833f5e8a5b6c2c88c029945b758bd2bc55fd61c7d1fb6550fbe57,2025-08-15T13:12:51.217000 CVE-2025-55718,0,0,3020ade752aaf4efa5601037aaad8fb5a97b90dff62a4f6b7065f29f58ec5acb,2025-08-15T03:15:35.017000 CVE-2025-55719,0,0,9b10c67384f4921e937d969f9099cd89ec19af72f6eaf259c42e0cdc03afdc58,2025-08-15T03:15:35.630000 @@ -303679,7 +303800,7 @@ CVE-2025-5910,0,0,df84a90bc6998145e69834ed2e1f65f3a667ceade3e8f265d705351c29298f CVE-2025-5911,0,0,94c16ab86f5bd868bbe2861c5600211dfebdf0b057e4a91c0d013d85ef19c840,2025-06-16T17:06:20.300000 CVE-2025-5912,0,0,10ff6acf965d367f7f73802da6c280421d13214babe0565635ffb936692b9383,2025-06-16T16:52:15.440000 CVE-2025-5913,0,0,4cba6ee8cf199de13dc8cd6aadd287347b651acc47698b712c4382a0d9737790,2025-06-16T16:49:15.273000 -CVE-2025-5914,0,0,e5cdc0c616f4369357e9e6fc722ed8c4d2bd559f8d8520d091f36439ecdca52a,2025-08-12T11:15:27.420000 +CVE-2025-5914,0,1,9c717ed40c7b8d3a844b1f556ca57265e0b2664545482fd6734e9df7fd309f1e,2025-08-20T09:15:28.647000 CVE-2025-5915,0,0,0c052cc8a9ad5098035586b4c6440ef27951f72b0f5db4312cbc480ce07c1c06,2025-08-15T18:07:44.653000 CVE-2025-5916,0,0,8548799ab14530bd43b5f1551368b5e8b5a207d5c54ab4133b32c19d7596f46b,2025-08-15T18:12:06.987000 CVE-2025-5917,0,0,c4194b5a03ecc13eb43c377a4dbedcb6be988eca4692d9c93a44c5ec7c7d23ca,2025-08-15T18:16:42.910000 @@ -306129,4 +306250,7 @@ CVE-2025-9185,0,0,720c41f8910f4c95a7c15347393abfae35d388b40ccf099b5c5394d7756337 CVE-2025-9186,0,0,a6d02bc05fdd58fad5055ac4b55a01004de3d58332bca9412b1caee50d1f892e,2025-08-19T21:15:31.180000 CVE-2025-9187,0,0,9d516af18ecbba9914f1655dcba90ed6b4d7fbd75c968b42313faf2666dd73e7,2025-08-19T21:15:31.303000 CVE-2025-9193,0,0,e39973fa231341ef00de631102d79a0630b44466cf26c697c75b3c2dfb32117e,2025-08-20T00:15:26.727000 -CVE-2025-9202,1,1,625bafb58928a6b9904488ed9e68a2db58c5a56c847090c0467db96fd3084bb0,2025-08-20T07:15:30.357000 +CVE-2025-9202,0,0,625bafb58928a6b9904488ed9e68a2db58c5a56c847090c0467db96fd3084bb0,2025-08-20T07:15:30.357000 +CVE-2025-9225,1,1,a8dd2f7bd22b3608417a96c763779b93e6908a62a4782b76683ef88075293c30,2025-08-20T08:15:50.097000 +CVE-2025-9228,1,1,840bff6bf91c5a7ef85bdc3e67c43c73f601efeee40215c7d85762d32a5a895c,2025-08-20T09:15:28.953000 +CVE-2025-9229,1,1,18fcbcdf715c5734a543900d9f06d8a86180286d636dfb7ee11b6254c969327e,2025-08-20T09:15:29.180000