Skip to content

Commit b0ad04c

Browse files
advisory-database[bot]advisory-database[bot]
committed
Advisory Database Sync
1 parent 7b3accb commit b0ad04c

File tree

34 files changed

+1063
-1
lines changed

34 files changed

+1063
-1
lines changed

‎advisories/unreviewed/2025/08/GHSA-c9qv-g34c-5xgf/GHSA-c9qv-g34c-5xgf.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-c9qv-g34c-5xgf",
4-
"modified": "2025-08-04T12:30:41Z",
4+
"modified": "2025-10-29T09:30:22Z",
55
"published": "2025-08-04T12:30:41Z",
66
"aliases": [
77
"CVE-2025-8515"
@@ -23,6 +23,10 @@
2323
"type": "ADVISORY",
2424
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8515"
2525
},
26+
{
27+
"type": "WEB",
28+
"url": "https://backend.intelbras.com/sites/default/files/2025-08/Aviso%20de%20Seguran%C3%A7a%20-%20Incontrol%202.21.60%20e%202.21.61%20PT-IN%20.pdf"
29+
},
2630
{
2731
"type": "WEB",
2832
"url": "https://vuldb.com/?ctiid.318641"

‎advisories/unreviewed/2025/10/GHSA-26xv-gjx4-vj92/GHSA-26xv-gjx4-vj92.json‎

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-26xv-gjx4-vj92",
4+
"modified": "2025-10-29T09:30:22Z",
5+
"published": "2025-10-29T09:30:22Z",
6+
"aliases": [
7+
"CVE-2023-7320"
8+
],
9+
"details": "The WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7.8.2, due to improper CORS handling on the Store API's REST endpoints allowing direct external access from any origin. This can allow unauthenticated attackers to extract sensitive user information including PII(Personal Identifiable Information).",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-7320"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2939652@woocommerce/trunk&old=2933569@woocommerce/trunk&sfp_email=&sfph_mail="
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://wpscan.com/vulnerability/d1cec296-b5df-4cea-8c0d-d03a975cb6af"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7b2d1879-c337-41c9-9f47-f9c2fe8e5928?source=cve"
33+
}
34+
],
35+
"database_specific": {
36+
"cwe_ids": [
37+
"CWE-200"
38+
],
39+
"severity": "MODERATE",
40+
"github_reviewed": false,
41+
"github_reviewed_at": null,
42+
"nvd_published_at": "2025-10-29T07:15:33Z"
43+
}
44+
}

‎advisories/unreviewed/2025/10/GHSA-3g8r-fpc3-3p9r/GHSA-3g8r-fpc3-3p9r.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3g8r-fpc3-3p9r",
4+
"modified": "2025-10-29T09:30:23Z",
5+
"published": "2025-10-29T09:30:23Z",
6+
"aliases": [
7+
"CVE-2025-64201"
8+
],
9+
"details": "Cross-Site Request Forgery (CSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue affects PowerPress Podcasting: from n/a through <= 11.13.12.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64201"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/powerpress/vulnerability/wordpress-powerpress-podcasting-plugin-11-13-12-cross-site-request-forgery-csrf-vulnerability"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-352"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2025-10-29T09:15:40Z"
30+
}
31+
}

‎advisories/unreviewed/2025/10/GHSA-4527-g864-c7mh/GHSA-4527-g864-c7mh.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4527-g864-c7mh",
4+
"modified": "2025-10-29T09:30:23Z",
5+
"published": "2025-10-29T09:30:23Z",
6+
"aliases": [
7+
"CVE-2025-64202"
8+
],
9+
"details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Sahifa sahifa allows DOM-Based XSS.This issue affects Sahifa: from n/a through < 5.8.6.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64202"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/sahifa/vulnerability/wordpress-sahifa-theme-5-8-6-cross-site-scripting-xss-vulnerability"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-79"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2025-10-29T09:15:40Z"
30+
}
31+
}

‎advisories/unreviewed/2025/10/GHSA-4w5q-r88j-fm53/GHSA-4w5q-r88j-fm53.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4w5q-r88j-fm53",
4+
"modified": "2025-10-29T09:30:23Z",
5+
"published": "2025-10-29T09:30:23Z",
6+
"aliases": [
7+
"CVE-2025-64194"
8+
],
9+
"details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress Eduma eduma allows Stored XSS.This issue affects Eduma: from n/a through <= 5.7.6.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64194"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/eduma/vulnerability/wordpress-eduma-theme-5-7-6-cross-site-scripting-xss-vulnerability"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-79"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2025-10-29T09:15:38Z"
30+
}
31+
}

‎advisories/unreviewed/2025/10/GHSA-5c9w-xpcw-vprf/GHSA-5c9w-xpcw-vprf.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-5c9w-xpcw-vprf",
4+
"modified": "2025-10-29T09:30:24Z",
5+
"published": "2025-10-29T09:30:24Z",
6+
"aliases": [
7+
"CVE-2025-64290"
8+
],
9+
"details": "Cross-Site Request Forgery (CSRF) vulnerability in Premmerce Premmerce Product Search for WooCommerce premmerce-search allows Cross Site Request Forgery.This issue affects Premmerce Product Search for WooCommerce: from n/a through <= 2.2.4.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64290"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/premmerce-search/vulnerability/wordpress-premmerce-product-search-for-woocommerce-plugin-2-2-4-cross-site-request-forgery-csrf-vulnerability"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-352"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2025-10-29T09:15:46Z"
30+
}
31+
}

‎advisories/unreviewed/2025/10/GHSA-698r-29g4-5vv6/GHSA-698r-29g4-5vv6.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-698r-29g4-5vv6",
4+
"modified": "2025-10-29T09:30:23Z",
5+
"published": "2025-10-29T09:30:23Z",
6+
"aliases": [
7+
"CVE-2025-64216"
8+
],
9+
"details": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeSphere SmartMag smart-mag allows PHP Local File Inclusion.This issue affects SmartMag: from n/a through <= 10.3.0.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64216"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://vdp.patchstack.com/database/Wordpress/Theme/smart-mag/vulnerability/wordpress-smartmag-theme-10-3-0-local-file-inclusion-vulnerability"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-98"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2025-10-29T09:15:42Z"
30+
}
31+
}

‎advisories/unreviewed/2025/10/GHSA-8cr2-hpc7-v23m/GHSA-8cr2-hpc7-v23m.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-8cr2-hpc7-v23m",
4+
"modified": "2025-10-29T09:30:24Z",
5+
"published": "2025-10-29T09:30:24Z",
6+
"aliases": [
7+
"CVE-2025-64283"
8+
],
9+
"details": "Authorization Bypass Through User-Controlled Key vulnerability in Rometheme RTMKit rometheme-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RTMKit: from n/a through <= 1.6.7.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64283"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/rometheme-for-elementor/vulnerability/wordpress-rtmkit-plugin-1-6-7-insecure-direct-object-references-idor-vulnerability"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-639"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2025-10-29T09:15:44Z"
30+
}
31+
}

‎advisories/unreviewed/2025/10/GHSA-8gx7-cf2h-mfwc/GHSA-8gx7-cf2h-mfwc.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-8gx7-cf2h-mfwc",
4+
"modified": "2025-10-29T09:30:24Z",
5+
"published": "2025-10-29T09:30:24Z",
6+
"aliases": [
7+
"CVE-2025-64228"
8+
],
9+
"details": "Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in FantasticPlugins SUMO Affiliates Pro affs allows Retrieve Embedded Sensitive Data.This issue affects SUMO Affiliates Pro: from n/a through <= 11.0.0.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64228"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/affs/vulnerability/wordpress-sumo-affiliates-pro-plugin-11-0-0-sensitive-data-exposure-vulnerability"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-497"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2025-10-29T09:15:44Z"
30+
}
31+
}

‎advisories/unreviewed/2025/10/GHSA-8rwj-g494-3qp6/GHSA-8rwj-g494-3qp6.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-8rwj-g494-3qp6",
4+
"modified": "2025-10-29T09:30:23Z",
5+
"published": "2025-10-29T09:30:23Z",
6+
"aliases": [
7+
"CVE-2025-64212"
8+
],
9+
"details": "Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS Pro: from n/a through < 4.7.16.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64212"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://vdp.patchstack.com/database/Wordpress/Plugin/masterstudy-lms-learning-management-system-pro/vulnerability/wordpress-masterstudy-lms-pro-plugin-4-7-16-broken-access-control-vulnerability"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-862"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2025-10-29T09:15:42Z"
30+
}
31+
}

0 commit comments

Comments
 (0)